CVE-2026-90357

Katalog CVE

CVSS 8.8 · High EPSS 0,34%

Skor CVSS 3.1 8.8 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement The flow is added to dev->twt_list before sending the agreement to the firmware, but the error path leaves it linked while flowid_mask is never set. The flow slot can then be reused and memset while still on the list, corrupting twt_list, and station removal leaves a dangling entry behind that mt7915_mac_twt_sched_list_add() later walks.

Rincian

Terbit di NVD

17 September 2026

Terakhir diubah

18 September 2026

Status NVD

Received

CVSS 3.1

8.8 (High), sumber CNA
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,7% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/16a04441eab0dcd4d7126a6f66b370adbf28f96d
• https://git.kernel.org/stable/c/1bd5c4ed2b9045faf83315c54cd37a9b7c71b5c7
• https://git.kernel.org/stable/c/6bce0f1280c94af8314f895f404629da09f0788c
• https://git.kernel.org/stable/c/beaa42b875965dbc3e80e46970e0bfa60a94c2db
• https://git.kernel.org/stable/c/c09d1b15ed2dc49060303b16a296b7b8b7794cbe
• https://git.kernel.org/stable/c/cabe239e95b4eebf5b6c3654087b66ff9425bc7b