CVE-2026-90403

HighCVSS 7.0/10Last modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtlwifi: pci: fix error path in rtl_pci_probe()

In the last error path in rtl_pci_probe(), the cleanup functions are skipped due to a wrong goto label. Moreover, the successful call to rtl_init_rfkill(), ieee80211_register_hw(), rtl_debug_add_one() have to be reverted. Fix this issue by updating the labels and adding the relevant cleanup functions to the last error path.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 0c8173385e549f95cd80c3fff5aab87b4f881d8d, < 2634998247d24be34ba16a7666f31815ef1da00b; >= 0c8173385e549f95cd80c3fff5aab87b4f881d8d, < cfd6824dd1d151ab3abc00117b3774c8056006e0; >= 0c8173385e549f95cd80c3fff5aab87b4f881d8d, < 86e6187f8525c8f8219eb49e022eba854cc6ab86; >= 0c8173385e549f95cd80c3fff5aab87b4f881d8d, < aef178ffae5420afdbf46f7133ed28bd4248e15c; >= 0c8173385e549f95cd80c3fff5aab87b4f881d8d, < b42fcfb097da46f0e86564736ced939e83cb8442; >= 0c8173385e549f95cd80c3fff5aab87b4f881d8d, < a89818977338ba71194b1ab1d071f0c0848b1e13; >= 0c8173385e549f95cd80c3fff5aab87b4f881d8d, < 1b68b6e529ce75112fab98e89583a76370ca394b; >= 0c8173385e549f95cd80c3fff5aab87b4f881d8d, < 3c2999d13eeb222ae56631aeb7ca248090f2b210
LinuxLinux2.6.38

References

Timeline

Published
Sep 17, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-90404In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_debugfs: Unregister panic notifier cros_ec_deCVE-2026-90405In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe() There are CVE-2026-90406In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: handle runtime PM resume failure in core deinit CheCVE-2026-904077.7In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_evenCVE-2026-904087.7In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_evenCVE-2026-90409In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Add vm_bind region with kbo range overlap check When a VMCVE-2026-90410In the Linux kernel, the following vulnerability has been resolved: spi: davinci: switch to managed controller allocation The controller iCVE-2026-90411In the Linux kernel, the following vulnerability has been resolved: nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request __CVE-2026-90412In the Linux kernel, the following vulnerability has been resolved: nvmet: fix return status of RMI log page on allocation failure nvmet_eCVE-2026-904139.1In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject login PDUs declaring more data than was received iserCVE-2026-904149.1In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject PDUs declaring more data than was received isert_recvCVE-2026-90415In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: free STAG index when TPT entry write fails write_tpt_entry
CVE-2026-90403: High severity, CVSS 7.0 | Vulnix