CVE-2026-90368

wifi: mt76: mt7915: unwind state on add_interface failure

N/A
Published: September 17, 2026 at 04:09 PM UTC
Updated: October 21, 2026 at 01:20 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unwind state on add_interface failure When mt76_wcid_alloc() fails, mt7915_add_interface() returned without clearing the vif_mask/omac_mask bits it had already set, without removing the firmware dev info added earlier, and without clearing a monitor_vif pointer to the vif mac80211 is about to free. mac80211 does not call remove_interface() for a failed add, so the indices and firmware dev entry leaked permanently and testmode could dereference the stale monitor_vif. Add a proper error unwind.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.19b619e01380eedf24e8d26a367e94e0ccaeb0c3dd
Vendor states this is fixed in 218fdf0fcb796b8d281dbdd4a6144c5a8fc7fd0f (fixed)
Vendor states this is fixed in 2fb6480c52f611338e1b0abe5e6219be1fc9ab75 (fixed)
Vendor states this is fixed in 507eddb8175a67df5086354b92d6a4fd7f6f1f96 (fixed)
Vendor states this is fixed in 71bf9de2ab3fb2c54bedb0b4c9b468d2e1d55280 (fixed)
Vendor states this is fixed in 5.19 (unaffected)
Vendor states this is fixed in 6.12.110 (unaffected)
Vendor states this is fixed in 6.18.52 (unaffected)
Vendor states this is fixed in 6.6.160 (unaffected)
Vendor states this is fixed in 7.2.6 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card