In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses PKT_TYPE_TXRX_NOTIFY is an mmio-only event, but mt7921_rx_check() and mt7921
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses PKT_TYPE_TXRX_NOTIFY is an mmio-only event, but mt7921_rx_check() and mt7921_queue_rx_skb() dispatch it to mt7921_mac_tx_free() on every bus. mt7921_mac_tx_free() cleans the DMA tx queues with mt76_queue_tx_cleanup(), which calls queue_ops->tx_cleanup(). Only the mmio queue ops implement that callback; on USB and SDIO it is NULL, so a TXRX_NOTIFY there calls a NULL pointer
Affected packages
- linux
- linux-allwinner-5.19
- linux-aws
- linux-aws-5.0
- linux-aws-5.11
- linux-aws-5.13
- linux-aws-5.15
- linux-aws-5.19
- linux-aws-5.3
- linux-aws-5.4
- linux-aws-5.8
- linux-aws-6.14
- linux-aws-6.17
- linux-aws-6.2
- linux-aws-6.5
- linux-aws-6.8
- linux-aws-fips
- linux-aws-hwe
- linux-azure
- linux-azure-4.15
- linux-azure-5.11
- linux-azure-5.13
- linux-azure-5.15
- linux-azure-5.19
- linux-azure-5.3
- linux-azure-5.4
- linux-azure-5.8
- linux-azure-6.11
- linux-azure-6.14
- linux-azure-6.17
- linux-azure-6.2
- linux-azure-6.5
- linux-azure-6.8
- linux-azure-edge
- linux-azure-fde
- linux-azure-fde-5.15
- linux-azure-fde-5.19
- linux-azure-fde-6.14
- linux-azure-fde-6.17
- linux-azure-fde-6.2
- linux-azure-fde-6.8
- linux-azure-fips
- linux-azure-nvidia
- linux-azure-nvidia-6.14
- linux-bluefield
- linux-fips
- linux-gcp
- linux-gcp-4.15
- linux-gcp-5.11
- linux-gcp-5.13
- linux-gcp-5.15
- linux-gcp-5.19
- linux-gcp-5.3
- linux-gcp-5.4
- linux-gcp-5.8
- linux-gcp-6.11
- linux-gcp-6.14
- linux-gcp-6.17
- linux-gcp-6.2
- linux-gcp-6.5
- linux-gcp-6.8
- linux-gcp-fips
- linux-gke
- linux-gke-4.15
- linux-gke-5.15
- linux-gke-5.4
- linux-gkeop
- linux-gkeop-5.15
- linux-gkeop-5.4
- linux-hwe
- linux-hwe-5.11
- linux-hwe-5.13
- linux-hwe-5.15
- linux-hwe-5.19
- linux-hwe-5.4
- linux-hwe-5.8
- linux-hwe-6.11
- linux-hwe-6.14
- linux-hwe-6.17
- linux-hwe-6.2
- linux-hwe-6.5
- linux-hwe-6.8
- linux-hwe-7.0
- linux-hwe-edge
- linux-ibm
- linux-ibm-5.15
- linux-ibm-5.4
- linux-ibm-6.8
- linux-intel-5.13
- linux-intel-iot-realtime
- linux-intel-iotg
- linux-intel-iotg-5.15
- linux-iot
- linux-kvm
- linux-lowlatency
- linux-lowlatency-hwe-5.15
- linux-lowlatency-hwe-5.19
- linux-lowlatency-hwe-6.11
- linux-lowlatency-hwe-6.2
- linux-lowlatency-hwe-6.5
- linux-lowlatency-hwe-6.8
- linux-lts-xenial
- linux-nvidia
- linux-nvidia-6.11
- linux-nvidia-6.17
- linux-nvidia-6.2
- linux-nvidia-6.5
- linux-nvidia-6.8
- linux-nvidia-7.0
- linux-nvidia-bos
- linux-nvidia-lowlatency
- linux-nvidia-tegra
- linux-nvidia-tegra-5.15
- linux-nvidia-tegra-igx
- linux-oem
- linux-oem-5.10
- linux-oem-5.13
- linux-oem-5.14
- linux-oem-5.17
- linux-oem-5.6
- linux-oem-6.0
- linux-oem-6.1
- linux-oem-6.11
- linux-oem-6.14
- linux-oem-6.17
- linux-oem-6.5
- linux-oem-6.8
- linux-oem-7.0
- linux-oracle
- linux-oracle-5.0
- linux-oracle-5.11
- linux-oracle-5.13
- linux-oracle-5.15
- linux-oracle-5.3
- linux-oracle-5.4
- linux-oracle-5.8
- linux-oracle-6.14
- linux-oracle-6.17
- linux-oracle-6.5
- linux-oracle-6.8
- linux-raspi
- linux-raspi-5.4
- linux-raspi-realtime
- linux-raspi2
- linux-realtime
- linux-realtime-6.14
- linux-realtime-6.17
- linux-realtime-6.8
- linux-riscv
- linux-riscv-5.11
- linux-riscv-5.15
- linux-riscv-5.19
- linux-riscv-5.8
- linux-riscv-6.14
- linux-riscv-6.17
- linux-riscv-6.5
- linux-riscv-6.8
- linux-starfive-5.19
- linux-starfive-6.2
- linux-starfive-6.5
- linux-xilinx
- linux-xilinx-zynqmp
Exploit signal
- Known exploited (CISA KEV)
- No
- EPSS score
- —
- EPSS percentile
- —
EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.
Sources
- https://www.cve.org/CVERecord?id=CVE-2026-68194
- https://git.kernel.org/stable/c/ef2ee5f820c3ef87643b51e960c20b4a14d8336b
- https://git.kernel.org/stable/c/263816e92e8d66c81c98ccab2b5d2191ed08ec71
- https://git.kernel.org/stable/c/24475d2ddc8d8dfd82f4d2be0d951401f86911a6
- https://git.kernel.org/stable/c/ecf995b828191829ba4a87169bccabcbeb5c9c32
- https://git.kernel.org/stable/c/da4082e91acabc1498611ed8ccc53f0610baefc6
Structured record: https://ubuntu.com/security/CVE-2026-68194
Recommended response stack
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.
Get incidents like this as alerts for your stack.
Join the beta