CVE-2026-98957

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: disable rx napi when removing device Unloading the mt7915e module with a MT7916 triggers multiples WARN in netifnapidellocked and in pagepooldisabledirectrecycling because the driver does not disable the napi...

CVE-2026-90373

A flaw was found in the Linux kernel's mt76 wireless driver, specifically within the mt7915 module. The mt7915removeinterface function cleared a Wireless Client ID wcid mask bit without proper locking mechanisms and before clearing the associated RCU Read-Copy-Update pointer. This oversight creat...

CVE-2026-90372

A flaw was found in the Linux kernel's mt76 WiFi driver, affecting mt7915 devices. A remote attacker, by sending a specially crafted VHT/HE MCS map with no supported spatial streams, can trigger an integer underflow in the mt7915mcugetstanss function. This results in an incorrect value being...

CVE-2026-90368

A flaw was found in the Wi-Fi driver mt76: mt7915 of the Linux kernel. Improper error handling during the addition of a new Wi-Fi interface can lead to the permanent leakage of system resources and a stale pointer dereference. This vulnerability could allow a local attacker to cause system...

CVE-2026-90357

A flaw was found in the Linux kernel's Wi-Fi subsystem, specifically within the mt76: mt7915 driver. This vulnerability occurs when a Target Wake Time TWT flow is added to an internal list but not correctly unlinked if the firmware rejects the agreement. This improper handling can lead to the reu...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7915 – The reference to hif2 is only released in error cases where dev-hif2 is set, and this variable is not assigned until after the IRQ setup is completed. If pciallocirqvectors or the primary devmrequestirq fails...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7915: Fix for double initialization of hif2 on the non-WED path. The function mt7915pciinithif2 was called unconditionally and again within the WED-inactive branch. The helper function increments the global hifidx,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7915 – Avoid nss underflow in mt7915mcugetstanss If a peer’s VHT/HE MCS map has no supported spatial streams all fields are 0x3, the loop exits with nss == 0, and the function returns a value of u8-1 255. This value...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7915 – Fixed the issue where the ext PHY was freed after a register error occurred. After the mt7915registerextPhy function succeeded, there was a failure in the main PHY-related functions like mt7915initdebugfs or...

CVE-2026-90354

A flaw was found in the Linux kernel's mt76 Wi-Fi driver, specifically in the mt7915 component. The mt7915pciinithif2 function was called unconditionally twice during initialization on non-WED dual-hif hardware. This double initialization led to a leaked device reference, which is a pointer to a...

CVE-2026-90352

A flaw was found in the Linux kernel's wifi: mt76: mt7915 driver. During the probe interrupt IRQ setup, if the pciallocirqvectors or devmrequestirq functions fail, a hif2 reference is not properly released. This oversight results in a resource leak, which could potentially lead to system...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7915 – Unlink the TWT flow if the MCU rejects the agreement. The flow is added to dev-twtlist before sending the agreement to the firmware. However, the error path leaves the flow linked, even though flowidmask is...

SUSE CVE-2026-90352

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: release hif2 reference on probe IRQ failure The hif2 reference obtained by mt7915pciinithif2 is only released on error paths that key off dev-hif2, which is not assigned until after the IRQ setup. If...

SUSE CVE-2026-90353

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix ext PHY use-after-free on register error path After mt7915registerextphy succeeded, a failure of the main PHY mt7915initdebugfs or mt7915coredumpregister unwound through freephy2, which called...

SUSE CVE-2026-90354

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix double hif2 init on the non-WED path mt7915pciinithif2 was called unconditionally and again inside the WED-inactive branch. The helper increments the global hifidx, writes the PCIe RECOGID register and tak...

SUSE CVE-2026-90357

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement The flow is added to dev-twtlist before sending the agreement to the firmware, but the error path leaves it linked while flowidmask is never set. The flow slot...

SUSE CVE-2026-90368

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unwind state on addinterface failure When mt76wcidalloc fails, mt7915addinterface returned without clearing the vifmask/omacmask bits it had already set, without removing the firmware dev info added earlier, a...

SUSE CVE-2026-90372

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: avoid nss underflow in mt7915mcugetstanss If a peer's VHT/HE MCS map has no supported spatial stream all fields 0x3, the loop exits with nss == 0 and the function returned u8-1 255, which was then written into...

SUSE CVE-2026-90373

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear mt7915removeinterface cleared the wcid mask bit with no lock held and before clearing the RCU wcid pointer. The mask is a non-atomic RMW shared with the...

Linux Distros Unpatched Vulnerability : CVE-2026-90373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear mt7915removeinterface cleared the wcid mask bit with no lock held and before clearing th...