CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's mt76 driver, specifically the mt7996 component, where improper mutex handling during the disabling of the transmission worker can lead to race conditions. This flaw may result in corrupted DMA descriptors or tokens during a channel switch, potentially compromising data integrity and system stability. Organizations utilizing Linux systems with the mt76 driver should prioritize addressing this issue to mitigate risks associated with data corruption and service disruptions.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER mt7996_mac_reset_work() parked the tx worker and disabled the RX/TX NAPIs before taking dev->mt76.mutex. mt76_worker_disable()/_enable() are plain kthread park/unpark, not refcounted, and __mt76_set_channel() toggles the same worker and the MT76_RESET bit under the mutex. An L1 SER racing a channel switch could therefore have the worker unparked and MT76_RESET cleared while the reset path resets the DMA rings, corrupting descriptors or tokens. Take the mutex before disabling the worker, as mt7915 does.