In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_add_links() In order to avoid a possible NULL pointer dereference in mt7996_mac_sta_init_link routine, move the phy pointer check before running mt7996_mac_sta_init_link() in mt7996_mac_sta_add_links routine.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2025102817-CVE-2025-40066-02f5@gregkh/T
I've been following the mt76 line and this bug appears to be pretty consistent with real world usage. If you have a mt7996 in a multi-device environment, you should check the logs to see if the https://stealbrainrotgame.com/ dereference error occurred before the patch. The way they moved the phy check seems small, but it helps the driver to be more stable.