A vulnerability in the Linux kernel mt7925 Wi-Fi driver could allow a local attacker to cause a system crash or potentially achieve arbitrary code execution via a use-after-free condition.

This vulnerability is a race condition occurring within the mt7925 Wi-Fi driver, where a work item (mlo_pm_work) is not properly canceled during the device stop sequence. An attacker with local access can trigger this condition, resulting in a kernel-level memory error when the timer fires against a deallocated workqueue.

The exploitation of this vulnerability could lead to a local denial of service through kernel panic, disrupting critical business operations and system availability. Given the CVSS 3.1 score of 7.8, the potential for high impacts on confidentiality, integrity, and availability is significant if an attacker successfully escalates privileges or manipulates kernel memory structures.

Immediate Action: Update the Linux kernel to version 6.18.50, 7.2.4, or the latest stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel warnings or stack traces related to the mt7925 driver or workqueue management errors.

Compensating Controls: Restrict local shell access to untrusted users to minimize the attack surface, as this vulnerability requires local access to trigger the driver teardown sequence.

Public Exploit Available: No — exploit_available (unknown).

This vulnerability presents a significant risk to systems utilizing the mt7925 wireless chipset due to the potential for kernel-level instability. Administrators should prioritize patching the Linux kernel to the identified fixed versions to prevent exploitation. If immediate patching is not feasible, ensure that only trusted users have local access to affected hardware.