High 7.8Published Sep 11, 2026

CVE-2026-89523wifi: mt76: mt7925: cancel pending mlo_pm_work

Updated under an hour ago (2026-10-19 09:10 UTC)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel pending mlo_pm_work If the device is reset, suspended or unregistered within that window, the pending work can still run and access vif/bss data that may already be freed, or send MCU commands while the firmware is not available. Add cancel_delayed_work_sync(&dev->mlo_pm_work) in all relevant teardown and suspend paths: - mt7925_mac_reset_work() (chip reset recovery) - mt7925e_unregister_device() (PCIe unbind) - mt7925_pci_suspend() (PCIe bus suspend) - mt7925_suspend() (mac80211 suspend) - mt7925u_suspend() (USB bus / runtime suspend) This ensures the work is stopped before the device state becomes invalid.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	276a568832577c81ec90b62dc506bbdc3781ca46 builds before 5be6d02837d418bc6c805b5cab1b338de6de9ca7; from 276a568832577c81ec90b62dc506bbdc3781ca46 before c5e073f2fbfd34d22099a50d96f60990799753e2; from 276a568832577c81ec90b62dc506bbdc3781ca46 before 2889e84282dda147f10b10d94cf0efd90a349c53; 74eb79258bfd5f2ffe6d26a09c898992b2afa1ce; from 6.14.3 before 6.15	CNA record

References

https://git.kernel.org/stable/c/5be6d02837d418bc6c805b5cab1b338de6de9ca7
https://git.kernel.org/stable/c/c5e073f2fbfd34d22099a50d96f60990799753e2
https://git.kernel.org/stable/c/2889e84282dda147f10b10d94cf0efd90a349c53

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.