A vulnerability in the Linux kernel mt76 wifi driver could lead to system instability or memory corruption, posing a high risk to affected wireless infrastructures.

This is an improper check vulnerability within the mt76 wifi driver, specifically in the mt76_sta_add function. The flaw allows an attacker to trigger unintended reinitialization of the wcid poll_list, and the attack vector is categorized as adjacent (AV:A).

Successful exploitation of this kernel-level vulnerability could result in a denial of service or potential privilege escalation. Given the CVSS score of 8.8, this represents a high-severity risk that could impact the availability and integrity of systems relying on affected wireless hardware.

Immediate Action: Update the Linux kernel to version 6.18.38, 7.1.3, or later versions where the fix has been backported.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected crashes related to the mt76 wifi driver modules.

Compensating Controls: Restrict access to wireless management interfaces to authorized personnel only to reduce the likelihood of remote adjacent exploitation.

Public Exploit Available: No

Organizations utilizing Linux-based systems with mt76 wireless drivers should prioritize applying the provided kernel patches. Given the potential for system-wide impact, testing and deploying the stable kernel release is the most effective method to mitigate this high-severity risk.