CVE-2026-53103

Source
https://cve.org/CVERecord?id=CVE-2026-53103
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53103.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-53103
Downstream
BELL (1)
CGA (5)
CLSA (1)
DEBIAN (1)
openSUSE (1)
ROOT (2)
SUSE (4)
UBUNTU (1)
Related
Published
2026-06-24T16:30:39Z
Modified
2026-11-08T02:31:01Z
Summary
wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync

roc_abort_sync() can deadlock with roc_work(). roc_work() holds dev->mt76.mutex, while cancel_work_sync() waits for roc_work() to finish. If the caller already owns the same mutex, both sides block and no progress is possible.

This deadlock can occur during station removal when mt76_sta_state() -> mt76_sta_remove() -> mt7925_mac_sta_remove_link() -> mt7925_mac_link_sta_remove() -> mt7925_roc_abort_sync() invokes cancel_work_sync() while roc_work() is still running and holding dev->mt76.mutex.

This avoids the mutex deadlock and preserves exactly-once work ownership.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53103.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
45064d19fd3af6aeb0887b35b5564927980cf150
Fixed
253cfc33d95ce4a30fd2eca0ff0138603c6c2fcc
Fixed
153bcba36c87a1ba555b57b6c49028d5812f895b
Fixed
2d8e0053bca29143ace51e08c980ff076844a4b0
Fixed
dd08ca3f092f4185ece69ce2a835c23198b1628a
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.11.2
Fixed
6.12
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
978d1756b3ae1b857826eb7ed8181f3c5180dce9

Affected versions

v6.*
v6.11.10
v6.11.11
v6.11.2
v6.11.3
v6.11.4
v6.11.5
v6.11.6
v6.11.7
v6.11.8
v6.11.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53103.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.33
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.10

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53103.json"