Linux Distros Unpatched Vulnerability : CVE-2026-90357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement The flow is added to dev-twtlist before sending the agreement to the firmware, but the erro...

DEBIAN-CVE-2026-90357

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement The flow is added to dev-twtlist before sending the agreement to the firmware, but the error path leaves it linked while flowidmask is never set. The flow slot...

AZL-103011 CVE-2026-90357 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement The flow is added to dev-twtlist before sending the agreement to the firmware, but the error path leaves it linked while flowidmask is never set. The flow slot...

CVE-2026-90357 wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement The flow is added to dev-twtlist before sending the agreement to the firmware, but the error path leaves it linked while flowidmask is never set. The flow slot...

CVE-2026-90357 wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement The flow is added to dev-twtlist before sending the agreement to the firmware, but the error path leaves it linked while flowidmask is never set. The flow slot...

CVE-2026-90357

CVE-2026-90357 is a memory-corruption bug in the Linux kernel's mt76 mt7915 WiFi driver. When the MCU (firmware) rejects a TWT (Target Wake Time) agreement, the error path fails to unlink the flow from dev->twt_list while leaving flowid_mask unset. The flow slot can then be reused and memset w...

EUVD-2026-82018

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement The flow is added to dev-twtlist before sending the agreement to the firmware, but the error path leaves it linked while flowidmask is never set. The flow slot...