Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53097

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() When the mt7996 pci chip is detaching, the mt7996_crash_data is released in mt7996_coredump_unregister(). However, the work item dump_work may still be running or pending, leading to UAF bugs when the already freed crash_data is dereferenced again in mt7996_mac_dump_work(). The race condition can occur as follows: CPU 0 (removal path) | CPU 1
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:3ff32497886fa3282ed00daabb2c183decd268584c66e4269731b56aa99b66db
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/wireless/mediatek/mt76/mt7996/init.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.4"},{"lessThan":"6.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.91","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.33","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.10","versionTyp…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7018a54a819e9fe5841b806c9527fa062d0e11594e7853f779a4296a606a9c8e · sha256:7544f56afbdc504f… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/wireless/mediatek/mt76/mt7996/init.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"180182a3f23ff79430a32ca2c4c1885368ceab48","status":"affected","version":"878161d5d4a469a6ef7f3fb4fe9f676bc508ee99","versionType":"git"},{"lessThan":"aa4a31cd89f4fde5043ac613fe0e27014a60a60b","status":"affected","version":"878161d5d4a469a6ef7f3fb4fe9f676bc508ee99","versionType":"git"},{"lessThan":"188e10f9ea3109d23c6b7643aa6ec2f5cb0faa6d","status":"affected","version…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7018a54a819e9fe5841b806c9527fa062d0e11594e7853f779a4296a606a9c8e · sha256:7544f56afbdc504f… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/wireless/mediatek/mt76/mt7996/init.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.4"},{"lessThan":"6.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.91","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.33","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.10","versionTyp…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7018a54a819e9fe5841b806c9527fa062d0e11594e7853f779a4296a606a9c8e · sha256:7544f56afbdc504f… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/wireless/mediatek/mt76/mt7996/init.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"180182a3f23ff79430a32ca2c4c1885368ceab48","status":"affected","version":"878161d5d4a469a6ef7f3fb4fe9f676bc508ee99","versionType":"git"},{"lessThan":"aa4a31cd89f4fde5043ac613fe0e27014a60a60b","status":"affected","version":"878161d5d4a469a6ef7f3fb4fe9f676bc508ee99","versionType":"git"},{"lessThan":"188e10f9ea3109d23c6b7643aa6ec2f5cb0faa6d","status":"affected","version…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7018a54a819e9fe5841b806c9527fa062d0e11594e7853f779a4296a606a9c8e · sha256:7544f56afbdc504f… · /containers/cna/affected/0

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/180182a3f23ff79430a32ca2c4c1885368ceab48"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7018a54a819e9fe5841b806c9527fa062d0e11594e7853f779a4296a606a9c8e · sha256:7544f56afbdc504f… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/188e10f9ea3109d23c6b7643aa6ec2f5cb0faa6d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7018a54a819e9fe5841b806c9527fa062d0e11594e7853f779a4296a606a9c8e · sha256:7544f56afbdc504f… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/aa4a31cd89f4fde5043ac613fe0e27014a60a60b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7018a54a819e9fe5841b806c9527fa062d0e11594e7853f779a4296a606a9c8e · sha256:7544f56afbdc504f… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/c8f62f73bbced3a79894655bdb0b625462d956fc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7018a54a819e9fe5841b806c9527fa062d0e11594e7853f779a4296a606a9c8e · sha256:7544f56afbdc504f… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer