CVE-2026-90377

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This issue affects the Receive Reorder Offload (RRO) 3.0 data queuing mechanism. Incorrect handling of received data frames can cause them to stall and be reordered within the driver. This can lead to a denial of service or data integrity problems for Wi-Fi communications.

This vulnerability is rated as Moderate impact because exploitation requires a system with specific MediaTek wireless hardware supporting RRO 3.0, restricting the blast radius to network transmission stalls and potential communication denial of service. Standard enterprise Red Hat deployments typically operate in physical server rooms or virtualized environments without wireless network adapters. Systems lacking the relevant MediaTek Wi-Fi devices or utilizing standard wired interfaces remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.