CVE-2026-80934 Linux CVE debrief

Who should care

Linux kernel maintainers, wifi mt76 driver users, and security teams responsible for Linux kernel deployments should assess exposure and verify if their Linux kernel version is affected. The vulnerability affects the Linux kernel's wifi mt76 driver and can cause DMA mapping exhaustion and failures for other on-SoC consumers.

Why it matters

CVE-2026-80934 is a vulnerability in the Linux kernel's wifi mt76 driver that causes a TX DMA mapping leak for AddBA req frames. Linux kernel maintainers, wifi mt76 driver users, and security teams should assess exposure and verify if their Linux kernel version is affected.

• DMA mapping exhaustion can cause failures for other on-SoC consumers
• TX DMA mapping leak can lead to memory exhaustion
• wifi mt76 driver users may experience connectivity issues

Technical summary

The Linux kernel's wifi mt76 driver has a vulnerability that causes a TX DMA mapping leak for AddBA req frames. This can lead to DMA mapping exhaustion and failures for other on-SoC consumers. The vulnerability affects the Linux kernel's wifi mt76 driver and has been resolved in the Linux kernel. The vulnerability has a CVSS score of null and a CVSS severity of null. Linux kernel maintainers, wifi mt76 driver users, and security teams should assess exposure and verify if their Linux kernel version is affected. The vulnerability can cause DMA mapping exhaustion, which can lead to failures for other on-SoC consumers.

Defensive priority

Medium

Recommended defensive actions

• Review the Linux kernel patch notes and Git commit hashes for CVE-2026-80934
• Assess exposure of wifi mt76 driver in your Linux kernel deployments
• Verify if your Linux kernel version is affected by the vulnerability
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. The Linux kernel patch notes and Git commit hashes are provided as references. The vulnerability affects the Linux kernel's wifi mt76 driver and causes a TX DMA mapping leak for AddBA req frames. The vulnerability has been resolved in the Linux kernel. Defenders should verify if their Linux kernel version is affected and review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.