CVE-2026-80632: wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996_init_tx_queues()

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-28 · updated 2026-08-28

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996_init_tx_queues() When MT76_NPU and CONFIG_NET_MEDIATEK_SOC_WED are enabled and mt76 detects properly the Airoha NPU SoC, mt7996_init_tx_queues() will dereference a NULL WED pointer. Fix the issue by always passing the WED pointer from mt7996_dma_init().

Affected products

Linux kernel: 7.1 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/6794edb55b5f5ef834e03b0b241b1a8b725f82c0
https://git.kernel.org/stable/c/93f3f9a9e955569ab7c3f02f0486d3aaf2314a56

Get alerted when CVE-2026-80632 or the next vulnerability affects your stack