Linux Distros Unpatched Vulnerability : CVE-2026-90373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear mt7915removeinterface cleared the wcid mask bit with no lock held and before clearing th...

Linux Distros Unpatched Vulnerability : CVE-2026-90356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset mt7996macresetvifiter queues non-default vif links for kfreercu while dev-wcid stil...

AZL-102755 CVE-2026-90375 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix non-AQL packet accounting for MLO stations mt76txqueueskb overrides the wcid passed by the driver with sta-drvpriv, so the wcid might incorrectly be changed after TX, causing wcid-nonaqlpackets to be counted on th...

CVE-2026-90375 wifi: mt76: fix non-AQL packet accounting for MLO stations

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix non-AQL packet accounting for MLO stations mt76txqueueskb overrides the wcid passed by the driver with sta-drvpriv, so the wcid might incorrectly be changed after TX, causing wcid-nonaqlpackets to be counted on th...

CVE-2026-90375

CVE-2026-90375 affects the mt76 Wi-Fi driver in the Linux kernel. The root cause is in __mt76_tx_queue_skb(), which overrides the wcid passed by the driver with sta->drv_priv. For MLO (Multi-Link Operation) stations, this causes non_aql_packets to be counted on the wrong wcid — for example, a ...

EUVD-2026-82034

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear mt7915removeinterface cleared the wcid mask bit with no lock held and before clearing the RCU wcid pointer. The mask is a non-atomic RMW shared with the...

CVE-2026-90373 wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear mt7915removeinterface cleared the wcid mask bit with no lock held and before clearing the RCU wcid pointer. The mask is a non-atomic RMW shared with the...

CVE-2026-90373

A race condition in the Linux kernel mt76 mt7915 WiFi driver allowed mt7915_remove_interface() to clear the wcid mask bit without holding the mutex and before clearing the RCU wcid pointer. On DBDC (dual-band dual-concurrent) configurations, the two wiphys share one mt76_dev, so this raced with a...

CVE-2026-90356

CVE-2026-90356 is a use-after-free vulnerability in the Linux kernel's mt76 Wi-Fi driver (mt7996/MediaTek). During a full device reset, mt7996_mac_reset_vif_iter() queues non-default virtual interface (vif) links for kfree_rcu while dev->wcid[] still holds pointers to the WCID structures embed...

CVE-2026-90356 wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset mt7996macresetvifiter queues non-default vif links for kfreercu while dev-wcid still holds pointers to the wcid embedded in each freed link;...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mt76: Fixed a use-after-free by removing a non-RCU wcid pointer. This fix addresses an issue detected by KASAN regarding use-after-free in mt76txqschedule. This was done by protecting mtxq-wcid with rculock between...

SUSE CVE-2026-63832

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish check in mt76staadd Since mt7925macstaadd publishes wcid, add publish check in mt76staadd to avoid reinitializing the wcid-polllist. Found dev-stapolllist corruption when using mt7925 and 7.1-rc4...

CVE-2026-63866

CVE-2026-63866 relates to a Linux kernel issue in the mt76/mt7996 Wi‑Fi stack. The vulnerability arises from the mt7996_mac_sta_deinit_link() routine where the WCID pointer is cleared, removing the STA link. The issue is addressed by kernel fixes documented in the linked patches (stable kernel up...

CVE-2026-63866 wifi: mt76: mt7996: Clear wcid pointer in mt7996_mac_sta_deinit_link()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Clear wcid pointer in mt7996macstadeinitlink Clear WCID pointer removing the sta link in mt7996macstadeinitlink routine...

CVE-2026-63832

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish check in mt76staadd Since mt7925macstaadd publishes wcid, add publish check in mt76staadd to avoid reinitializing the wcid-polllist. Found dev-stapolllist corruption when using mt7925 and 7.1-rc4...

CVE-2026-63832 wifi: mt76: add wcid publish check in mt76_sta_add

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish check in mt76staadd Since mt7925macstaadd publishes wcid, add publish check in mt76staadd to avoid reinitializing the wcid-polllist. Found dev-stapolllist corruption when using mt7925 and 7.1-rc4...

CVE-2026-63832

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish check in mt76staadd Since mt7925macstaadd publishes wcid, add publish check in mt76staadd to avoid reinitializing the wcid-polllist. Found dev-stapolllist corruption when using mt7925 and 7.1-rc4...

CVE-2026-63832 wifi: mt76: add wcid publish check in mt76_sta_add

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish check in mt76staadd Since mt7925macstaadd publishes wcid, add publish check in mt76staadd to avoid reinitializing the wcid-polllist. Found dev-stapolllist corruption when using mt7925 and 7.1-rc4...

CVE-2026-63832

CVE-2026-63832 addresses a Linux kernel wifi issue in mt76/mt7925: a publish sequence in mt76_sta_add can reinitialize wcid->poll_list, risking list corruption (found in dev->sta_poll_list during mt7925 mt76 interactions). Advisories from NVD/SUSE/OSV/NASL show the fix involves adding a wci...

CVE-2026-63832

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish check in mt76staadd Since mt7925macstaadd publishes wcid, add publish check in mt76staadd to avoid reinitializing the wcid-polllist. Found dev-stapolllist corruption when using mt7925 and 7.1-rc4...