CVE-2026-90357

A flaw was found in the Linux kernel's Wi-Fi subsystem, specifically within the mt76: mt7915 driver. This vulnerability occurs when a Target Wake Time (TWT) flow is added to an internal list but not correctly unlinked if the firmware rejects the agreement. This improper handling can lead to the reuse and overwriting of the flow's memory slot while it is still linked, resulting in memory corruption. This corruption could cause system instability or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.