A race condition in the Linux kernel mt76 wifi driver, specifically within the mt792x component, creates a use-after-free vulnerability that could lead to system instability or arbitrary code execution.

This is a use-after-free vulnerability triggered by a race condition in the mt76_rx_poll_complete function. An unauthenticated attacker within proximity (adjacent network) can exploit this flaw when a station is removed while the rx_status still holds a pointer to the wcid.

The vulnerability carries a CVSS score of 8.8, indicating a high level of risk. Successful exploitation could result in a kernel panic, leading to denial of service, or potentially allow an attacker to gain elevated privileges or execute arbitrary code on the affected system, resulting in total system compromise.

Immediate Action: Update the Linux kernel to version 6.12.110, 7.2.6, or later, as these versions contain the necessary patches to resolve the memory management race condition.

Proactive Monitoring: Monitor system logs for kernel oops or KASAN error reports, specifically those referencing mt76_rx_poll_complete or memory access violations.

Compensating Controls: Since this is a driver-level vulnerability, minimize exposure by restricting wireless network access to trusted devices and implementing network segmentation to contain potential impact.

Public Exploit Available: No (exploit_available: false)

Given the high severity of this kernel-level vulnerability, organizations should prioritize patching affected Linux distributions as part of their next maintenance cycle. Failure to address this flaw leaves systems susceptible to memory corruption attacks, which are difficult to detect once the kernel state has been compromised.