The vulnerability in the Linux kernel's mt76 WiFi driver (CVE-2026-63832) involves improper handling of the wcid publish state in the mt76_sta_add function. Specifically, the mt7925_mac_sta_add function publishes the wcid, but without a proper check in mt76_sta_add, the wcid->poll_list could be reinitialized incorrectly. This leads to corruption of the dev->sta_poll_list linked list, where the prev->next pointer incorrectly points to itself, causing list integrity issues. The corruption manifests as WiFi disconnects and authentication retries. The issue was fixed by adding a publish check in mt76_sta_add to prevent reinitialization of the poll_list when already published.

The vulnerability causes corruption of internal linked lists used by the WiFi driver, which can result in WiFi disconnections and authentication failures. This may lead to network instability or denial of service on affected systems using the mt7925 WiFi hardware with the affected Linux kernel versions. No information about remote code execution or privilege escalation is provided.

A fix has been implemented in the Linux kernel by adding a wcid publish check in the mt76_sta_add function to prevent reinitializing the poll_list and avoid list corruption. Users should update to a Linux kernel version that includes this fix. Since this is a kernel-level driver issue, applying the official kernel update from the vendor or distribution is the recommended remediation. Patch status is not explicitly stated in the input; check the vendor or Linux kernel advisory for the exact fixed version and update accordingly.