CVE-2026-80934

CVE-2026-80934 affects the Linux kernel WiFi driver mt76 mt7996 (and mt7992). The root cause is a TX DMA mapping leak on AddBA request action frames: these frames use a HW MAC-TXP layout, but the TX-free path incorrectly decodes them as FW-TXP, causing the unmap loop to run zero times and the DMA...