CVE-2026-90382

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. When operating in monitor mode with the fcsfail filter enabled, a remote attacker could send corrupted wireless frames. These frames, if reporting an invalid length, would trigger a kernel warning. If the system is configured to panic on...

CVE-2026-90380

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. A use-after-free vulnerability occurs due to a race condition in the mt76rxpollcomplete function. This can happen when a Wi-Fi station STA is removed, but the system still attempts to access its associated wireless client ID wcid. An...

CVE-2026-90379

A flaw was found in the Linux kernel's Wi-Fi driver mt76. This vulnerability occurs when a PCIe Advanced Error Reporting AER error causes the bus to become unresponsive. The driver then attempts to read registers, receiving an invalid value that corrupts its internal memory management. This...

CVE-2026-90377

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This issue affects the Receive Reorder Offload RRO 3.0 data queuing mechanism. Incorrect handling of received data frames can cause them to stall and be reordered within the driver. This can lead to a denial of service or data integrity...

CVE-2026-90376

A flaw was found in the MediaTek mt76 Wi-Fi driver within the Linux kernel. An incorrect Multi-Link Device MLD ID in the MAC Transmit Descriptor TXD and Host Interface Transmit Packet HIF TXP can cause the firmware to enter a busy loop. This issue occurs when a third MLD link is in power saving...

CVE-2026-90375

A flaw was found in the Wi-Fi mt76 driver of the Linux kernel. This vulnerability arises from incorrect accounting of non-AQL Atheros Quality of Service packets for Multi-Link Operation MLO stations. Specifically, the mt76txqueueskb function can misattribute packet counts, leading to an inflated...

CVE-2026-90374

A flaw was found in the Linux kernel's mt76 wifi driver. This vulnerability occurs due to improper validation of the bandidx field, which is used to index an array. A malicious actor could provide a corrupt or reserved descriptor value, leading to an out-of-bounds access or a NULL pointer...

CVE-2026-90373

A flaw was found in the Linux kernel's mt76 wireless driver, specifically within the mt7915 module. The mt7915removeinterface function cleared a Wireless Client ID wcid mask bit without proper locking mechanisms and before clearing the associated RCU Read-Copy-Update pointer. This oversight creat...

CVE-2026-90372

A flaw was found in the Linux kernel's mt76 WiFi driver, affecting mt7915 devices. A remote attacker, by sending a specially crafted VHT/HE MCS map with no supported spatial streams, can trigger an integer underflow in the mt7915mcugetstanss function. This results in an incorrect value being...

CVE-2026-90371

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability is a race condition that occurs during the recycling of RXDMADC buffers. These buffers are associated with different Network Adapter Programming Interface NAPI instances, and a direct recycling method can lead to a timin...

CVE-2026-90369

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. The mt76mmiowritecopy and mt76mmioreadcopy functions, which handle memory-mapped I/O MMIO operations, can perform out-of-bounds reads or writes. This occurs when the data length is not a multiple of four, leading to memory access beyond th...

CVE-2026-90368

A flaw was found in the Wi-Fi driver mt76: mt7915 of the Linux kernel. Improper error handling during the addition of a new Wi-Fi interface can lead to the permanent leakage of system resources and a stale pointer dereference. This vulnerability could allow a local attacker to cause system...

CVE-2026-90367

A flaw was found in the Linux kernel's mt7996 Wi-Fi driver. The driver fails to properly hold a mutex, which is a mechanism to prevent simultaneous access to shared resources, when disabling a transmit worker during System Error Recovery SER. This oversight creates a race condition where a...

CVE-2026-90366

A flaw was found in the Linux kernel's mt76 Wi-Fi driver, specifically affecting mt7996 devices. When a Channel Switch Announcement CSA countdown is active and Multiple Basic Service Set Identifier MBSSID is enabled, the driver may attempt to write more beacon data than allocated. This can lead t...

SUSE-SU-2026:4749-1 Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.144 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

CVE-2026-90365

A flaw was found in the mt76 Wi-Fi driver in the Linux kernel. During device unregistration, certain work items resetwork and rcwork were not properly cancelled. This oversight could allow these work items to execute on an unregistered hardware, potentially leading to unexpected behavior, resourc...

CVE-2026-90363

A flaw was found in the Linux kernel's drm/msm component. During the initialization of Kernel Mode Setting KMS, an error handling path attempts to deallocate resources twice. This double deallocation leads to a use-after-free error, which can cause a system crash. A local attacker could potential...

CVE-2026-90359

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When BPF programs are attached to functions that return 16-byte values using specific trampoline types such as fexit, fmodret, fsession, or structops, the BPF trampoline incorrectly preserves only 8 bytes of the return...

CVE-2026-90358

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter x86 trampoline. When processing 128-bit arguments, the system incorrectly calculates the required stack size for saving registers. This under-allocation leads to memory corruption by overwriting adjacent stack slots. A local attack...

CVE-2026-90357

A flaw was found in the Linux kernel's Wi-Fi subsystem, specifically within the mt76: mt7915 driver. This vulnerability occurs when a Target Wake Time TWT flow is added to an internal list but not correctly unlinked if the firmware rejects the agreement. This improper handling can lead to the reu...