A null pointer dereference in Linux’s mt76/mt7915 Wi‑Fi driver allows the kernel to crash if the driver processes HE (High Efficiency) capability lookups without confirming the presence of a valid capability entry. The vulnerability would cause an immediate kernel panic, leading to loss of system availability. The weakness is a classic NULL pointer dereference, identified as CWE‑476.

All Linux kernel builds that include the mt76 or mt7915 Wi‑Fi driver are affected. The issue arises when the driver module is loaded and a wireless interface attempts to use HE capabilities, regardless of the specific kernel release version.

EPSS of < 1% indicates a very low probability of exploitation and the vulnerability is not listed in the CISA KEV catalog. The CVSS score of 5.5 reflects moderate severity. The null pointer dereference occurs in kernel‑space during processing of HE capability lookups; an attacker would need to trigger the lookup, likely through control of a wireless interface or manipulation of Wi‑Fi frames, which would result in a denial of service. This attack would generally require local privilege or the ability to influence traffic to the vulnerable driver.