Riskcovery

CVE-2025-68738

wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()

State
Published
Severity
Not scored
Published
Dec 24, 2025
Updated
May 11, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()

If a link does not have an assigned channel yet, mt7996_vif_link returns NULL. We still need to store the updated queue settings in that case, and apply them later. Move the location of the queue params to within struct mt7996_vif_link.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c0df2f0caa8dde0d50f36649ee28a54c5079281b to before 96841352aaba7723c20afb3a5356746810ef8198Affected
  • c0df2f0caa8dde0d50f36649ee28a54c5079281b to before b8f34c1c5c4f5130c20e3253c95ba1d844d402b9Affected
  • c0df2f0caa8dde0d50f36649ee28a54c5079281b to before 79277f8ad15ec5f255ed0e1427c7a8a3e94e7f52Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.17.13 through 6.17.*Not affected
  • 6.18.2 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.