wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex (CVE-2026-80938) | HOL Guard CVE

Unknown severity · Source severity not reportedCVE-2026-80938

wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex

Answer in brief

CVE-2026-80938 records a Unknown severity vulnerability in wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Sep 11, 2026Updated Sep 11, 2026Source checked Sep 11, 2026First seen by HOL Sep 11, 2026Material review Sep 11, 2026

Upstream Advisory

Key facts

Risk: Unknown severitySource severity not reported
Exploitation: Not marked as known exploited
Affected software: 2 mapped packages or products
Fix availability: Available

Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
Linux/Linuxgeneric	>=c6bf20109a3fae92402cb76ad709ec5256bcd169 <3114d479f2a1d31b2e6214c395794c6e5715e579 \|\| >=c6bf20109a3fae92402cb76ad709ec5256bcd169 <4506e229b2e468b8c64bcf52c50c41a3bf2e633e \|\| >=c6bf20109a3fae92402cb76ad709ec5256bcd169 <44be85af3e1772ffb3332feafedad2a73b22854c \|\| >=c6bf20109a3fae92402cb76ad709ec5256bcd169 <bda8324270b1ac91bfba1df8928e0570e29759e8	3114d479f2a1d31b2e6214c395794c6e5715e579, 4506e229b2e468b8c64bcf52c50c41a3bf2e633e, 44be85af3e1772ffb3332feafedad2a73b22854c, bda8324270b1ac91bfba1df8928e0570e29759e8
Linux/Linuxgeneric	5.8	Not reported

Recommended response

Check inventory. Check lockfiles and deployed manifests for Linux/Linux, Linux/Linux.
Review the reported fix. Update Linux/Linux to 3114d479f2a1d31b2e6214c395794c6e5715e579 if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
Sep 11, 2026
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Sep 11, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Sep 11, 2026

Sources and claim methodology

Upstream source description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615_suspend() acquired the mt76 mutex and then called cancel_delayed_work_sync() on mac_work. mt7615_mac_work() acquires the same mutex via mt7615_mutex_acquire() at the top of the worker, so if mac_work is already running and blocked on the mutex, the suspend path deadlocks waiting for the work it holds the mutex against. Flush scan_work and mac_work before taking the mutex, matching the suspend paths in mt7921 and mt7925. scan_work only takes the mt76 spinlock, but moving it keeps the sequence consistent. This also keeps mac_work from running over an already suspended HIF, which the previous split (async cancel under the lock, sync cancel after release) would have allowed.

Quoted source text, attributed separately from HOL analysis.