Impact
A deadlock can occur in the Linux mt7925 Wi‑Fi driver when the function that aborts a station removal operation holds a mutex that is also owned by a worker that is executed in parallel. If both sides wait for each other, no progress is possible and the driver can freeze, leading to a loss of connectivity. This is an instance of a hard‑coded race condition that can interrupt service availability. The vulnerability is characterized by synchronization failure identified in CWE‑749.
Affected Systems
Linux kernel distributions that ship the mt7925 driver without the applied patch. The exact affected kernel versions are not listed, but any device using the mt7925 network interface card and running an older kernel that contains the unpatched mt7925 driver is susceptible. This includes a range of consumer‑grade Wi‑Fi adapters and embedded systems that rely on the kernel’s mt76 subsystem.
Risk and Exploitability
The CVSS score is not reported and EPSS is not available, so the quantitative severity is unknown; however, the fix was released publicly, suggesting the issue was considered significant enough to warrant a patch. The development trace shows commits that correct the deadlock, implying that exploitation would only be possible on kernels that have not yet incorporated these changes. The likely attack vector is local or remote network traffic that triggers station removal (e.g., management frames), but detailed exploitation mechanics are not disclosed in the available data. In any case, the vulnerability’s impact is service disruption, and once triggered it can potentially hold the entire Wi‑Fi stack hostage until the device is rebooted.
OpenCVE Enrichment