PT-2026-51992 · Linux · Linux Kernel

Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-53098

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the mt7915 WiFi driver. When an mt7915 PCI chip is detached, the mt7915 coredump unregister() function releases mt7915 crash data. However, a race condition can occur if the dump work item is still pending or executing, causing the mt7915 mac dump work() function to dereference the already freed crash data memory.

Recommendations Ensure that cancel work sync() is called within the mt7915 unregister device() function to synchronize and cancel any pending or executing dump work before the crash data is deallocated.

Related Identifiers

CVE-2026-53098

Affected Products

Linux Kernel

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-53098 · Security Note
• https://git.kernel.org/stable/c/e6856af8a22a8e2cd18241a465ed00c2301b3a5e · Note
• https://git.kernel.org/stable/c/6b7cbb13c838cf2a5f2e7be0e96fe15250087939 · Note
• https://twitter.com/VulmonFeeds/status/2069929989340901712 · Twitter Post
• https://git.kernel.org/stable/c/21ce6d867867645fff0ef657be18f61d9f39dcd8 · Note
• https://git.kernel.org/stable/c/1146d0946b5358fad24812bd39d68f31cd40cc34 · Note
• https://git.kernel.org/stable/c/6d5202409467d621b6d1dfd7fc7dadb997fe66d2 · Note