CVE-2026-90351
kernel: wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's mt76 mt7996 Wi-Fi driver. When the primary PCIe function's Wireless Ethernet Dispatch (WED) attachment fails, the system incorrectly proceeds to attach the secondary function's WED. This leaves the device in an inconsistent state, which can lead to a system crash. This vulnerability could allow a local attacker to cause a denial of service.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-455 · Non-exit on Failed Initialization