Medium 5.5Published Jun 24, 2026

CVE-2026-53101wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync

Updated under an hour ago (Oct 27, 2026, 10:30 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync roc_abort_sync() can deadlock with roc_work(). roc_work() holds dev->mt76.mutex, while cancel_work_sync() waits for roc_work() to finish. If the caller already owns the same mutex, both sides block and no progress is possible. This deadlock can occur during station removal when mt76_sta_state() -> mt76_sta_remove() -> mt7921_mac_sta_remove() -> mt7921_roc_abort_sync() invokes cancel_work_sync() while roc_work() is still running and holding dev->mt76.mutex. This avoids the mutex deadlock and preserves exactly-once work ownership.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Jul 4, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 352d966126e66d825244f1185eb9f2d904c83dd4 before b4faaa617af3f4173e64169b0ec1af8f9c5bca10; from 352d966126e66d825244f1185eb9f2d904c83dd4 before 35180c772f5e11e2fa4d80d3dfd50906cb6d9646; 352d966126e66d825244f1185eb9f2d904c83dd4 builds before 91e77840bf13de3add125060cf8b32ca24a52c8c; from 352d966126e66d825244f1185eb9f2d904c83dd4 before d5059e52fd8bc624ec4255c9fa01a266513d126b	CNA record
linux linux_kernel linux:linux_kernel	from 6.9 before 6.12.95; from 6.13 before 6.18.33; from 6.19 before 7.0.10	NVD

References

References

https://git.kernel.org/stable/c/b4faaa617af3f4173e64169b0ec1af8f9c5bca10	patch
https://git.kernel.org/stable/c/35180c772f5e11e2fa4d80d3dfd50906cb6d9646	patch
https://git.kernel.org/stable/c/91e77840bf13de3add125060cf8b32ca24a52c8c	patch
https://git.kernel.org/stable/c/d5059e52fd8bc624ec4255c9fa01a266513d126b	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.