Strix
63.1K

CVE-2026-80938

UnknownEPSS 0.17%

Last modified

CVE-2026-80938 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615_suspend() acquired the mt76 mutex and then called cancel_delayed_work_sync() on mac_work. mt7615_mac_work() acquires the same mutex via mt7615_mutex_acquire() at the top of the worker, so if mac_work is already running and blocked on the mutex, the suspend path deadlocks waiting for the work it holds the mutex against. Flush scan_work and mac_work before taking the mutex, matching the suspend paths in mt7921 and mt7925. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615_suspend() acquired the mt76 mutex and then called cancel_delayed_work_sync() on mac_work. mt7615_mac_work() acquires the same mutex via mt7615_mutex_acquire() at the top of the worker, so if mac_work is already running and blocked on the mutex, the suspend path deadlocks waiting for the work it holds the mutex against. Flush scan_work and mac_work before taking the mutex, matching the suspend paths in mt7921 and mt7925. scan_work only takes the mt76 spinlock, but moving it keeps the sequence consistent. This also keeps mac_work from running over an already suspended HIF, which the previous split (async cancel under the lock, sync cancel after release) would have allowed.

Metrics

EPSS Probability
0.17%

6.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= c6bf20109a3fae92402cb76ad709ec5256bcd169, < 36c73b86a09f0e51c0f81a75c8945b6c5557ff27; >= c6bf20109a3fae92402cb76ad709ec5256bcd169, < 33d29aeb4c0eede92622a7d04ea492b94c30f089; >= c6bf20109a3fae92402cb76ad709ec5256bcd169, < ef2ec8b537c3a54e241d693bd03016f80d0d4484; >= c6bf20109a3fae92402cb76ad709ec5256bcd169, < 3114d479f2a1d31b2e6214c395794c6e5715e579; >= c6bf20109a3fae92402cb76ad709ec5256bcd169, < 4506e229b2e468b8c64bcf52c50c41a3bf2e633e; >= c6bf20109a3fae92402cb76ad709ec5256bcd169, < 44be85af3e1772ffb3332feafedad2a73b22854c; >= c6bf20109a3fae92402cb76ad709ec5256bcd169, < bda8324270b1ac91bfba1df8928e0570e29759e8
LinuxLinux5.8

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-80938?
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615_suspend() acquired the mt76 mutex and then called cancel_delayed_work_sync() on mac_work. mt7615_mac_work() acquires the same mutex via mt7615_mutex_acquire() at the top of the worker, so if mac_work is already running and blocked on the mutex, the suspend path deadlocks waiting for the work it holds the mutex against. Flush scan_work and mac_work before taking the mutex, matching the suspend paths in mt7921 and mt7925. scan_work only takes the mt76 spinlock, but moving it keeps the sequence consistent. This also keeps mac_work from running over an already suspended HIF, which the previous split (async cancel under the lock, sync cancel after release) would have allowed.
How severe is CVE-2026-80938?
Severity scoring for CVE-2026-80938 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-80938?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-80938?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST