The vulnerability in the Linux kernel's mt76 wifi driver (mt7921) involves improper resource management in the probe error path. Specifically, when pcim_iomap_region() or devm_kmemdup() fail, the code returns immediately without freeing resources previously allocated, such as the mt76_device structure and PCI IRQ vectors. This resource leak was addressed by modifying the error handling to jump to the existing cleanup code, ensuring all allocated resources are properly released on failure.

The vulnerability could cause resource leaks during device initialization failures, potentially leading to resource exhaustion or kernel instability. There is no indication of direct security compromise such as privilege escalation or code execution. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to address this resource leak by improving error path cleanup. Users should update to the kernel version that includes this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or Linux kernel advisory for the exact fixed version and update accordingly.