{"id":"CVE-2026-53318","title":"wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr()\n\nMove the NULL check for 'sta' before dereferencing it to prevent a\npossible crash.","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f < 28ed0b61f67386c0ba1213227d350005000240fd","Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f < 93d0694fb56de4628a921244d7f100c28acd2def","Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f < b0332428a8d4cf93752eda9e2b0d5585525e689f","Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f < 83ae3a18ba957257b4c406273d2da2caeea2b439","Linux 6.11"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:26:48.087037Z"},"published":"2026-06-26","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:34:20.808Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-53318","references":[{"url":"https://git.kernel.org/stable/c/28ed0b61f67386c0ba1213227d350005000240fd"},{"url":"https://git.kernel.org/stable/c/93d0694fb56de4628a921244d7f100c28acd2def"},{"url":"https://git.kernel.org/stable/c/b0332428a8d4cf93752eda9e2b0d5585525e689f"},{"url":"https://git.kernel.org/stable/c/83ae3a18ba957257b4c406273d2da2caeea2b439"}],"tags":["cve.org"],"epss":0.00162,"epssPercentile":0.05381,"ingestedAt":"2026-11-06T16:57:43.246Z","slug":"CVE-2026-53318","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr()\n\nMove the NULL check for 'sta' before dereferencing it to prevent a\npossible crash.\n\n## Affected\n\n- `Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f < 28ed0b61f67386c0ba1213227d350005000240fd`\n- `Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f < 93d0694fb56de4628a921244d7f100c28acd2def`\n- `Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f < b0332428a8d4cf93752eda9e2b0d5585525e689f`\n- `Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f < 83ae3a18ba957257b4c406273d2da2caeea2b439`\n- `Linux 6.11`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}