CVE-2026-90375

A flaw was found in the Wi-Fi mt76 driver of the Linux kernel. This vulnerability arises from incorrect accounting of non-AQL (Atheros Quality of Service) packets for Multi-Link Operation (MLO) stations. Specifically, the __mt76_tx_queue_skb() function can misattribute packet counts, leading to an inflated counter. When this counter exceeds a threshold, the transmit scheduler permanently stops servicing the affected station, which a remote attacker could exploit to cause a denial of service (DoS).

This flaw is evaluated as a Moderate severity issue for Red Hat because exploitation requires specific MediaTek wireless hardware operating with Multi-Link Operation (MLO), restricting the blast radius to a localized denial of service for connected wireless stations. Standard Red Hat Enterprise Linux deployments typically run in server, container, or cloud environments where Wi-Fi interfaces are absent or disabled by default. The issue does not permit remote code execution or kernel memory corruption, limiting overall risk on supported platforms.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.