CVE-2026-90351

A flaw was found in the Linux kernel's mt76 mt7996 Wi-Fi driver. When the primary PCIe function's Wireless Ethernet Dispatch WED attachment fails, the system incorrectly proceeds to attach the secondary function's WED. This leaves the device in an inconsistent state, which can lead to a system...

CVE-2026-90354

A flaw was found in the Linux kernel's mt76 Wi-Fi driver, specifically in the mt7915 component. The mt7915pciinithif2 function was called unconditionally twice during initialization on non-WED dual-hif hardware. This double initialization led to a leaked device reference, which is a pointer to a...

SUSE CVE-2026-90351

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed If the WED attach for the primary PCIe function fails, the probe path still attached wedhif2 for the secondary function, leaving the device in an...

Linux Distros Unpatched Vulnerability : CVE-2026-90351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed If the WED attach for the primary PCIe function fails, the probe path still attached...

DEBIAN-CVE-2026-90351

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed If the WED attach for the primary PCIe function fails, the probe path still attached wedhif2 for the secondary function, leaving the device in an...

CVE-2026-90351

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed If the WED attach for the primary PCIe function fails, the probe path still attached wedhif2 for the secondary function, leaving the device in an...

CVE-2026-90351 wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed If the WED attach for the primary PCIe function fails, the probe path still attached wedhif2 for the secondary function, leaving the device in an...

CVE-2026-90351

This vulnerability affects the Linux kernel mt76:mt7996 Wi-Fi driver's WED (Wireless Event Device) attach path. When the WED attach for the primary PCIe function fails during probe, the driver still attaches wed_hif2 for the secondary function, leaving the device in an inconsistent half-WED confi...

CVE-2026-90351 wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed If the WED attach for the primary PCIe function fails, the probe path still attached wedhif2 for the secondary function, leaving the device in an...

EUVD-2026-82012

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed If the WED attach for the primary PCIe function fails, the probe path still attached wedhif2 for the secondary function, leaving the device in an...

PT-2026-94699

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7996 driver where the system fails to stop the attachment of wed hif2 for the secondary PCIe function if the primary WED attach fails. This results in an...

PT-2026-94702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7915 driver where the mt7915 pci init hif2 function is called unconditionally and then called again within the WED-inactive branch. This results in the global hi...

SUSE CVE-2026-80934

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames mt7996/mt7992 hand the firmware a HW MAC-TXP for AddBA req action frames MTTXD7MACTXD, set in mt7996macwritetxwi80211, but are otherwise FW-TXP devices. On tx free...

DEBIAN-CVE-2026-80934

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames mt7996/mt7992 hand the firmware a HW MAC-TXP for AddBA req action frames MTTXD7MACTXD, set in mt7996macwritetxwi80211, but are otherwise FW-TXP devices. On tx free...

CVE-2026-80934

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames mt7996/mt7992 hand the firmware a HW MAC-TXP for AddBA req action frames MTTXD7MACTXD, set in mt7996macwritetxwi80211, but are otherwise FW-TXP devices. On tx free...

CVE-2026-80934 wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames mt7996/mt7992 hand the firmware a HW MAC-TXP for AddBA req action frames MTTXD7MACTXD, set in mt7996macwritetxwi80211, but are otherwise FW-TXP devices. On tx free...

EUVD-2026-76257

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames mt7996/mt7992 hand the firmware a HW MAC-TXP for AddBA req action frames MTTXD7MACTXD, set in mt7996macwritetxwi80211, but are otherwise FW-TXP devices. On tx free...

CVE-2026-80934

CVE-2026-80934 affects the Linux kernel WiFi driver mt76 mt7996 (and mt7992). The root cause is a TX DMA mapping leak on AddBA request action frames: these frames use a HW MAC-TXP layout, but the TX-free path incorrectly decodes them as FW-TXP, causing the unmap loop to run zero times and the DMA...

CVE-2026-80934: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames mt7996/mt7992 hand the firmware a HW MAC-TXP for AddBA req action frames MTTXD7MACTXD, set in mt7996macwritetxwi80211, but are otherwise FW-TXP devices. On tx free...

PT-2026-90064

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A TX DMA mapping leak exists in the mt76 driver for mt7996/mt7992 devices during the handling of AddBA request action frames. The issue occurs because the mt76 connac txp skb unmap...