Linux Distros Unpatched Vulnerability : CVE-2026-90377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: fix RX data queuing of RRO 3.0 For RRO 3.0, RX data released from a RRO data queue should be put to the indicator queue. The frames are processed an...

CVE-2026-90377

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix RX data queuing of RRO 3.0 For RRO 3.0, RX data released from a RRO data queue should be put to the indicator queue. The frames are processed and completed in the context of the indicator queue NAPI, which only...

CVE-2026-90371

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix RXDMADC buffer recycling race The RXDMADC buffers come from the RRO data queues' page pools, which are bound to a different NAPI, so the direct page-pool recycle used here could race the owning NAPI; take the...

DEBIAN-CVE-2026-90113

In the Linux kernel, the following vulnerability has been resolved: netdevsim: update queue NAPI association on queue reset In netdevsim, receive queues struct nsimrq embed their own struct napistruct. When queue reset is performed e.g. via queuereset debugfs, nsimqueuestart swaps in a newly...

CVE-2026-90377 wifi: mt76: fix RX data queuing of RRO 3.0

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix RX data queuing of RRO 3.0 For RRO 3.0, RX data released from a RRO data queue should be put to the indicator queue. The frames are processed and completed in the context of the indicator queue NAPI, which only...

CVE-2026-90377

CVE-2026-90377 affects the mt76 WiFi driver in the Linux kernel, specifically the RRO 3.0 RX data queuing path. The root cause is that RX frames released from a RRO data queue were placed on the data queue list instead of the MT_RXQ_RRO_IND indicator queue list. Because the indicator queue NAPI o...

CVE-2026-90371 wifi: mt76: fix RXDMAD_C buffer recycling race

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix RXDMADC buffer recycling race The RXDMADC buffers come from the RRO data queues' page pools, which are bound to a different NAPI, so the direct page-pool recycle used here could race the owning NAPI; take the...

CVE-2026-90371 wifi: mt76: fix RXDMAD_C buffer recycling race

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix RXDMADC buffer recycling race The RXDMADC buffers come from the RRO data queues' page pools, which are bound to a different NAPI, so the direct page-pool recycle used here could race the owning NAPI; take the...

CVE-2026-90371

CVE-2026-90371 affects the mt76 WiFi driver in the Linux kernel. The root cause is a race condition in RXDMAD_C buffer recycling: these buffers originate from RRO data queues' page pools, which are bound to a different NAPI context. The direct page-pool recycle path could race with the owning NAP...

EUVD-2026-82032

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix RXDMADC buffer recycling race The RXDMADC buffers come from the RRO data queues' page pools, which are bound to a different NAPI, so the direct page-pool recycle used here could race the owning NAPI; take the...

CVE-2026-90113 netdevsim: update queue NAPI association on queue reset

In the Linux kernel, the following vulnerability has been resolved: netdevsim: update queue NAPI association on queue reset In netdevsim, receive queues struct nsimrq embed their own struct napistruct. When queue reset is performed e.g. via queuereset debugfs, nsimqueuestart swaps in a newly...

EUVD-2026-81706

In the Linux kernel, the following vulnerability has been resolved: netdevsim: update queue NAPI association on queue reset In netdevsim, receive queues struct nsimrq embed their own struct napistruct. When queue reset is performed e.g. via queuereset debugfs, nsimqueuestart swaps in a newly...

CVE-2026-90113

CVE-2026-90113 is a slab-use-after-free vulnerability in the Linux kernel's netdevsim (network device simulator) driver. The root cause is that nsim_queue_start() failed to update the queue-to-NAPI mapping via netif_queue_set_napi() when a new receive queue was swapped in during a queue reset. Th...

PT-2026-94719

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mt76 wifi driver during the recycling of RXDMAD C buffers. These buffers originate from RRO data queues' page pools and are bound to a different NAPI New...

PT-2026-94461

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free read occurs in the netdevsim component when a queue reset is performed, such as via queue reset debugfs. The nsim queue start function replaces the receive queue ns...

SUSE CVE-2026-80940

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: pci: fix resource leak on failed NAPI setup rtwpciprobe allocates PCI resources through rtwpcisetupresource before it sets up NAPI. If rtwpcinapiinit fails, the error path jumps straight to errpcideclaim and skips...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: gve: Clearing napi-skb before devkfreeskbany In gverxfreeskb, napi-skb is incorrectly left referencing an skb after it is freed using devkfreeskbany. This can result in a subsequent call to napigetfrags returning a dangling...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: gve: Defer the enabling of interrupts until NAPI registration. Currently, interrupts are automatically enabled immediately upon request. This allows interrupts to occur before the associated NAPI context is fully initialized,...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mlxbfgige: Call requestirq after NAPI initialization The mlxbfgige driver encounters a NULL pointer exception in mlxbfgigeopen when kdump is enabled. The sequence to reproduce this exception is as follows: a Enable kdump. b Trigg...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: igbvf: fixed a double-free in igbvfprobe. In igbvfprobe, if registernetdev fails, the program will proceed to label errhwinit, and then to label errioremap. In freenetdev, which occurs just below label errioremap, there are...