In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync… (CVE-2026-53103)
A potential deadlock vulnerability in the Linux kernel's mt7925 WiFi driver was resolved. The issue involved a deadlock between roc_abort_sync() and roc_work() functions due to mutex ownership conflicts during station removal. This could cause a denial of service by blocking progress in the affected code paths.
AI Analysis
Technical Summary
The Linux kernel mt7925 WiFi driver contained a deadlock vulnerability (CVE-2026-53103) where roc_abort_sync() could deadlock with roc_work(). The deadlock occurs because roc_work() holds the dev->mt76.mutex while cancel_work_sync() waits for roc_work() to finish. If the caller already owns the same mutex, both sides block indefinitely. This situation arises during station removal when mt7925_roc_abort_sync() invokes cancel_work_sync() while roc_work() is still running and holding the mutex. The fix avoids this mutex deadlock and ensures exactly-once work ownership.
Potential Impact
This vulnerability can cause a denial of service by deadlocking kernel threads involved in WiFi station removal, potentially impacting system stability and availability. There is no impact on confidentiality or integrity.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to avoid the mutex deadlock in the mt7925 driver. Users should update to a kernel version that includes this fix. No additional mitigation is indicated.
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync… (CVE-2026-53103)
Description
A potential deadlock vulnerability in the Linux kernel's mt7925 WiFi driver was resolved. The issue involved a deadlock between roc_abort_sync() and roc_work() functions due to mutex ownership conflicts during station removal. This could cause a denial of service by blocking progress in the affected code paths.
CVSS v3.1
Score 5.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel mt7925 WiFi driver contained a deadlock vulnerability (CVE-2026-53103) where roc_abort_sync() could deadlock with roc_work(). The deadlock occurs because roc_work() holds the dev->mt76.mutex while cancel_work_sync() waits for roc_work() to finish. If the caller already owns the same mutex, both sides block indefinitely. This situation arises during station removal when mt7925_roc_abort_sync() invokes cancel_work_sync() while roc_work() is still running and holding the mutex. The fix avoids this mutex deadlock and ensures exactly-once work ownership.
Potential Impact
This vulnerability can cause a denial of service by deadlocking kernel threads involved in WiFi station removal, potentially impacting system stability and availability. There is no impact on confidentiality or integrity.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to avoid the mutex deadlock in the mt7925 driver. Users should update to a kernel version that includes this fix. No additional mitigation is indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-jp54-xjfc-9fqx
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-53103"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a5fcf471010f89cc2152619
Added to database: 07/21/2026, 19:57:59 UTC
Last enriched: 09/15/2026, 06:52:20 UTC
Last updated: 09/15/2026, 06:52:20 UTC
Views: 22
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.