Answer in brief
CVE-2026-63832 records a Unknown severity vulnerability in wifi: mt76: add wcid publish check in mt76_sta_add. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=4911e4cb157cf87d5bdb3fa8e0c200032443371e <3c499851753a24d2e148d4e9ca51764c0c51554e || >=4911e4cb157cf87d5bdb3fa8e0c200032443371e <55e014aaec650ede08b693ba59c8d0443f13f11c || >=4911e4cb157cf87d5bdb3fa8e0c200032443371e <20b126920a259df4d7dcae19fcfe2c57a74d6b2e || c9389e3f9453ec2d710e61830eafedddfd561226 || 57d3f833087942ded1a8765b1b361454d3d39e8f || >=6.12.13 <6.13 || >=6.13.2 <6.14 | 3c499851753a24d2e148d4e9ca51764c0c51554e, 55e014aaec650ede08b693ba59c8d0443f13f11c, 20b126920a259df4d7dcae19fcfe2c57a74d6b2e, 6.13, 6.14 |
| Linux/Linuxgeneric | 6.14 | Not reported |
Published upstream
Jul 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish check in mt76_sta_add Since mt7925_mac_sta_add publishes wcid, add publish check in mt76_sta_add to avoid reinitializing the wcid->poll_list. Found dev->sta_poll_list corruption when using mt7925 and 7.1-rc4. According to the corruption information, prev->next was changed to itself. wlan0: disconnect from AP 90:fb:5d:94:8b:e3 for new auth to 90:fb:5d:94:8b:e2 wlan0: authenticate with 90:fb:5d:94:8b:e2 (local address=84:9e:56:9c:7e:6b) wlan0: send auth to 90:fb:5d:94:8b:e2 (try 1/3) slab kmalloc-8k start ffff8c80958a6000 pointer offset 4160 size 8192 list_add corruption. prev->next should be next (ffff8c808a7488f8), but was ffff8c80958a7040. (prev=ffff8c80958a7040). mt76_wcid_add_poll+0x95/0xd0 [mt76] mt7925_mac_add_txs.part.0+0xa5/0xe0 [mt7925_common] mt7925_rx_check+0xa7/0xc0 [mt7925_common] mt76_dma_rx_poll+0x50d/0x790 [mt76] mt792x_poll_rx+0x52/0xe0 [mt792x_lib]
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-63832 records a Unknown severity vulnerability in wifi: mt76: add wcid publish check in mt76_sta_add. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=4911e4cb157cf87d5bdb3fa8e0c200032443371e <3c499851753a24d2e148d4e9ca51764c0c51554e || >=4911e4cb157cf87d5bdb3fa8e0c200032443371e <55e014aaec650ede08b693ba59c8d0443f13f11c || >=4911e4cb157cf87d5bdb3fa8e0c200032443371e <20b126920a259df4d7dcae19fcfe2c57a74d6b2e || c9389e3f9453ec2d710e61830eafedddfd561226 || 57d3f833087942ded1a8765b1b361454d3d39e8f || >=6.12.13 <6.13 || >=6.13.2 <6.14 | 3c499851753a24d2e148d4e9ca51764c0c51554e, 55e014aaec650ede08b693ba59c8d0443f13f11c, 20b126920a259df4d7dcae19fcfe2c57a74d6b2e, 6.13, 6.14 |
| Linux/Linuxgeneric | 6.14 | Not reported |
Published upstream
Jul 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish check in mt76_sta_add Since mt7925_mac_sta_add publishes wcid, add publish check in mt76_sta_add to avoid reinitializing the wcid->poll_list. Found dev->sta_poll_list corruption when using mt7925 and 7.1-rc4. According to the corruption information, prev->next was changed to itself. wlan0: disconnect from AP 90:fb:5d:94:8b:e3 for new auth to 90:fb:5d:94:8b:e2 wlan0: authenticate with 90:fb:5d:94:8b:e2 (local address=84:9e:56:9c:7e:6b) wlan0: send auth to 90:fb:5d:94:8b:e2 (try 1/3) slab kmalloc-8k start ffff8c80958a6000 pointer offset 4160 size 8192 list_add corruption. prev->next should be next (ffff8c808a7488f8), but was ffff8c80958a7040. (prev=ffff8c80958a7040). mt76_wcid_add_poll+0x95/0xd0 [mt76] mt7925_mac_add_txs.part.0+0xa5/0xe0 [mt7925_common] mt7925_rx_check+0xa7/0xc0 [mt7925_common] mt76_dma_rx_poll+0x50d/0x790 [mt76] mt792x_poll_rx+0x52/0xe0 [mt792x_lib]
Quoted source text, attributed separately from HOL analysis.