CVE-2026-53100

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: fix deadlock in remain-on-channel

mt76remainonchannel() and mt76roccomplete() call mt76setchannel() while already holding dev->mutex. Since mt76set_channel() also acquires dev->mutex, this results in a deadlock.

Use __mt76setchannel() instead of mt76setchannel(). Add canceldelayedworksync() for macwork before acquiring the mutex in mt76remainonchannel() to prevent a secondary deadlock with the macwork workqueue.