{"id":"CVE-2026-53100","title":"wifi: mt76: fix deadlock in remain-on-channel","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: fix deadlock in remain-on-channel\n\nmt76_remain_on_channel() and mt76_roc_complete() call mt76_set_channel()\nwhile already holding dev->mutex. Since mt76_set…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= a8f424c1287cc79a06c21816658feea87dfcb83f < 5fc8c5d45e44575dda9fcabdc2aac4ad97baf0cd","Linux >= a8f424c1287cc79a06c21816658feea87dfcb83f < 7a89c245d203aa0ed5ff2d68ac05b48b2ef9fa3f","Linux >= a8f424c1287cc79a06c21816658feea87dfcb83f < 6939b97ddad3cf3dfbb3b5a0a12ef79cb886747e","Linux 6.14"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:18:21.506578Z"},"published":"2026-06-24","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:23:59.367Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-53100","references":[{"url":"https://git.kernel.org/stable/c/5fc8c5d45e44575dda9fcabdc2aac4ad97baf0cd"},{"url":"https://git.kernel.org/stable/c/7a89c245d203aa0ed5ff2d68ac05b48b2ef9fa3f"},{"url":"https://git.kernel.org/stable/c/6939b97ddad3cf3dfbb3b5a0a12ef79cb886747e"}],"tags":["cve.org"],"epss":0.00124,"epssPercentile":0.02119,"ingestedAt":"2026-11-06T16:57:43.293Z","slug":"CVE-2026-53100","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: fix deadlock in remain-on-channel\n\nmt76_remain_on_channel() and mt76_roc_complete() call mt76_set_channel()\nwhile already holding dev->mutex. Since mt76_set_channel() also acquires\ndev->mutex, this results in a deadlock.\n\nUse __mt76_set_channel() instead of mt76_set_channel().\nAdd cancel_delayed_work_sync() for mac_work before acquiring the mutex\nin mt76_remain_on_channel() to prevent a secondary deadlock with the\nmac_work workqueue.\n\n## Affected\n\n- `Linux >= a8f424c1287cc79a06c21816658feea87dfcb83f < 5fc8c5d45e44575dda9fcabdc2aac4ad97baf0cd`\n- `Linux >= a8f424c1287cc79a06c21816658feea87dfcb83f < 7a89c245d203aa0ed5ff2d68ac05b48b2ef9fa3f`\n- `Linux >= a8f424c1287cc79a06c21816658feea87dfcb83f < 6939b97ddad3cf3dfbb3b5a0a12ef79cb886747e`\n- `Linux 6.14`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}