PT-2026-90239 · Linux · Linux

CVE-2026-89523

·

Published

2026-09-11

·

Updated

2026-09-11

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7925: cancel pending mlo pm work
If the device is reset, suspended or unregistered within that window, the pending work can still run and access vif/bss data that may already be freed, or send MCU commands while the firmware is not available.
Add cancel delayed work sync(&dev->mlo pm work) in all relevant teardown and suspend paths:
  • mt7925 mac reset work() (chip reset recovery)
  • mt7925e unregister device() (PCIe unbind)
  • mt7925 pci suspend() (PCIe bus suspend)
  • mt7925 suspend() (mac80211 suspend)
  • mt7925u suspend() (USB bus / runtime suspend)
This ensures the work is stopped before the device state becomes invalid.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-89523

Affected Products

Linux