CVE-2026-90381
kernel: wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · October 29, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()
When performing channel switches on different radios within a short timeframe, channel contexts with different bands can be carried for each struct ieee80211_vif_chanctx_switch.
Rework mt76_switch_vif_chanctx() to properly handle this scenario.
Statement
This vulnerability is assessed as having a Low impact because exploitation is restricted to hardware running specific MediaTek Wi-Fi adapters and requires precise timing during frequency switching operations. MediaTek wireless drivers are rarely loaded or enabled in standard enterprise server environments, substantially limiting the blast radius of this issue. Consequently, systems without physical wireless devices or without the driver loaded are not exposed to disruption.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-821 · Incorrect Synchronization