A vulnerability in the Linux kernel wifi driver creates a risk of local privilege escalation and system compromise due to improper handling of pending work during device teardown.

This is a use-after-free vulnerability occurring within the mt76 mt7925 wifi driver. If a device is reset, suspended, or unregistered, pending work may attempt to access freed data structures or interact with unavailable firmware, requiring local user privileges to trigger.

The vulnerability carries a CVSS score of 7.8, indicating a high severity risk. Successful exploitation by a local attacker could lead to a full system compromise, including unauthorized access to sensitive data, modification of system files, or denial of service through kernel panic. Given the central role of the kernel in system security, this flaw poses a significant threat to infrastructure integrity.

Immediate Action: Update the Linux kernel to version 6.18.50, 7.2.4, or a later stable release to incorporate the necessary teardown synchronization patches.

Proactive Monitoring: Monitor system logs for unexpected kernel oops or crash reports that may indicate exploitation attempts targeting the wireless driver stack.

Compensating Controls: Restrict local user access to the system and ensure that only trusted users have the ability to interact with wireless device drivers or perform hardware configuration changes.

Public Exploit Available: Unknown

This vulnerability represents a significant local security risk that could lead to kernel-level compromise. Administrators should prioritize patching the Linux kernel across all affected environments as part of their standard maintenance cycle. Given the potential for privilege escalation, testing and deploying the provided stable kernel updates is essential to maintaining a secure operating posture.