The Linux kernel mt7921 WiFi driver had a potential deadlock vulnerability involving the roc_abort_sync() and roc_work() functions. roc_work() holds the dev->mt76.mutex, and cancel_work_sync() waits for roc_work() to finish. If the caller already holds the same mutex and calls cancel_work_sync(), both sides block indefinitely, causing a deadlock. This scenario can occur during station removal when mt7921_roc_abort_sync() invokes cancel_work_sync() while roc_work() is active. The vulnerability was fixed by modifying the code to avoid this mutex deadlock and preserve exactly-once work ownership.

The vulnerability can cause a deadlock in the WiFi driver, potentially leading to system hangs or degraded network functionality during station removal. It requires high privileges (PR:H) and local access (AV:L) to exploit, with partial attack complexity and no user interaction needed. There is no indication of confidentiality, integrity, or availability impact beyond the deadlock condition.

A fix is available in Linux kernel versions 7.0.0-28.28.1 and later. Users should update to these or newer versions to resolve the deadlock issue in the mt7921 WiFi driver. Since this is a kernel-level fix, applying the official kernel update from the vendor is the recommended remediation.