---
id: CVE-2026-53318
title: 'wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr()

  Move the NULL check for 'sta' before dereferencing it to prevent a
  possible crash.
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f <
    28ed0b61f67386c0ba1213227d350005000240fd
  - >-
    Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f <
    93d0694fb56de4628a921244d7f100c28acd2def
  - >-
    Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f <
    b0332428a8d4cf93752eda9e2b0d5585525e689f
  - >-
    Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f <
    83ae3a18ba957257b4c406273d2da2caeea2b439
  - Linux 6.11
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:26:48.087037Z'
published: '2026-06-26'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:34:20.808Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-53318'
references:
  - url: 'https://git.kernel.org/stable/c/28ed0b61f67386c0ba1213227d350005000240fd'
  - url: 'https://git.kernel.org/stable/c/93d0694fb56de4628a921244d7f100c28acd2def'
  - url: 'https://git.kernel.org/stable/c/b0332428a8d4cf93752eda9e2b0d5585525e689f'
  - url: 'https://git.kernel.org/stable/c/83ae3a18ba957257b4c406273d2da2caeea2b439'
tags:
  - cve.org
epss: 0.00162
epssPercentile: 0.05381
ingestedAt: '2026-11-06T16:57:43.246Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr()

Move the NULL check for 'sta' before dereferencing it to prevent a
possible crash.

## Affected

- `Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f < 28ed0b61f67386c0ba1213227d350005000240fd`
- `Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f < 93d0694fb56de4628a921244d7f100c28acd2def`
- `Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f < b0332428a8d4cf93752eda9e2b0d5585525e689f`
- `Linux >= 44eb173bdd4f1775e13fce483d9e44ea8929717f < 83ae3a18ba957257b4c406273d2da2caeea2b439`
- `Linux 6.11`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.