CVE-2026-90354
kernel: wifi: mt76: mt7915: fix double hif2 init on the non-WED path
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · October 6, 2026
Description
A flaw was found in the Linux kernel's mt76 Wi-Fi driver, specifically in the mt7915 component. The mt7915_pci_init_hif2() function was called unconditionally twice during initialization on non-WED dual-hif hardware. This double initialization led to a leaked device reference, which is a pointer to a hardware resource, and the PCIe RECOG_ID register being written twice. This issue can result in a resource leak, potentially affecting system stability over time.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime