CVE-2026-90352

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7915: release hif2 reference on probe IRQ failure

The hif2 reference obtained by mt7915_pci_init_hif2() is only released on error paths that key off dev->hif2, which is not assigned until after the IRQ setup. If pci_alloc_irq_vectors() or the primary devm_request_irq() fails, the reference leaks. Drop it explicitly on those paths via mt7915_put_hif2().

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= f68d67623dec9445960b52a0e9e8e60297596b4b, < 8a2e38019846da29a112fac4dd96fe5bfa298faf; >= f68d67623dec9445960b52a0e9e8e60297596b4b, < 2a434d2637b9c9be9bcc8a84dc46880cc1446643; >= f68d67623dec9445960b52a0e9e8e60297596b4b, < 5c30a6350a300fbb800831f1b4373b2f59e03410; >= f68d67623dec9445960b52a0e9e8e60297596b4b, < ed5cc46a3c8f4fe7f549c661914d8d835169acc0; >= f68d67623dec9445960b52a0e9e8e60297596b4b, < fb9c7b4c238b4e5469a11a1fb8cf332f6193b995; >= f68d67623dec9445960b52a0e9e8e60297596b4b, < 8370aebd26a9dfa2e0de665e3ab504c0e97ee730
LinuxLinux5.19

References

Timeline

Published
Sep 17, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-903537.0In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix ext PHY use-after-free on register error path CVE-2026-90354In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix double hif2 init on the non-WED path mt7915_pcCVE-2026-90355In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: clear stale link state on full reset After a full CVE-2026-90356In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: free vif links after clearing wcid entries on full CVE-2026-903578.8In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement TCVE-2026-903587.8In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix trampoline stack size for 128-bit arguments btf_distill_CVE-2026-90359In the Linux kernel, the following vulnerability has been resolved: bpf: Reject >8 byte return values on return-reading trampoline paths bCVE-2026-90365.9IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could alloCVE-2026-90360In the Linux kernel, the following vulnerability has been resolved: regulator: core: use system_freezable_wq for init complete work scheduCVE-2026-90361In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix leak in ath11k_service_ready_ext_event() Currently, CVE-2026-90362In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Drop dev_pm_opp_set_rate(0) dev_pm_opp_set_rate(0) removeCVE-2026-90363In the Linux kernel, the following vulnerability has been resolved: drm/msm: don't tear down KMS twice when KMS init fails When priv->kms_
CVE-2026-90352: Unscored | Vulnix