CVE Database›Document archive›CVE-2026-90381

CVE-2026-90381

kernel: wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 17, 2026

Updated · October 29, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()

When performing channel switches on different radios within a short timeframe, channel contexts with different bands can be carried for each struct ieee80211_vif_chanctx_switch.

Rework mt76_switch_vif_chanctx() to properly handle this scenario.

Statement

This vulnerability is assessed as having a Low impact because exploitation is restricted to hardware running specific MediaTek Wi-Fi adapters and requires precise timing during frequency switching operations. MediaTek wireless drivers are rarely loaded or enabled in standard enterprise server environments, substantially limiting the blast radius of this issue. Consequently, systems without physical wireless devices or without the driver loaded are not exposed to disruption.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-821 · Incorrect Synchronization