---
id: CVE-2026-53105
title: 'wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi

  Check for a NULL `vif` before accessing `ieee80211_vif_is_mld(vif)` to
  avoid a potential kern…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ebb1406813c6ea60d2d95efc69ce6d53bbe43b31 <
    6c52fbdc6f656ac2e8ed1e3d0f42ed21ef285e15
  - >-
    Linux >= ebb1406813c6ea60d2d95efc69ce6d53bbe43b31 <
    815db7fd57aa81c93fc8a66c2fac5f8bd0a8d153
  - >-
    Linux >= ebb1406813c6ea60d2d95efc69ce6d53bbe43b31 <
    5d5bdea4ffcf54a6c4e751df713f95a1d783f298
  - >-
    Linux >= ebb1406813c6ea60d2d95efc69ce6d53bbe43b31 <
    962eb04e67552be406c906c83099c1d736aae3b6
  - Linux 6.11
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:18:48.678456Z'
published: '2026-06-24'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:24:00.287Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-53105'
references:
  - url: 'https://git.kernel.org/stable/c/6c52fbdc6f656ac2e8ed1e3d0f42ed21ef285e15'
  - url: 'https://git.kernel.org/stable/c/815db7fd57aa81c93fc8a66c2fac5f8bd0a8d153'
  - url: 'https://git.kernel.org/stable/c/5d5bdea4ffcf54a6c4e751df713f95a1d783f298'
  - url: 'https://git.kernel.org/stable/c/962eb04e67552be406c906c83099c1d736aae3b6'
tags:
  - cve.org
epss: 0.00162
epssPercentile: 0.05383
ingestedAt: '2026-11-06T16:57:43.295Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi

Check for a NULL `vif` before accessing `ieee80211_vif_is_mld(vif)` to
avoid a potential kernel panic in scenarios where `vif` might not be
initialized.

## Affected

- `Linux >= ebb1406813c6ea60d2d95efc69ce6d53bbe43b31 < 6c52fbdc6f656ac2e8ed1e3d0f42ed21ef285e15`
- `Linux >= ebb1406813c6ea60d2d95efc69ce6d53bbe43b31 < 815db7fd57aa81c93fc8a66c2fac5f8bd0a8d153`
- `Linux >= ebb1406813c6ea60d2d95efc69ce6d53bbe43b31 < 5d5bdea4ffcf54a6c4e751df713f95a1d783f298`
- `Linux >= ebb1406813c6ea60d2d95efc69ce6d53bbe43b31 < 962eb04e67552be406c906c83099c1d736aae3b6`
- `Linux 6.11`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.