CVE-2026-90365

wifi: mt76: cancel reset and rc work on device unregister

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 30, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: cancel reset and rc work on device unregister

Both drivers cancelled dump_work on unregister but left reset_work and rc_work to be flushed only by destroy_workqueue() in mt76_free_device(), which runs after the hw is unregistered and the hardware stopped. A reset_work that fires in that window calls ieee80211_restart_hw() and re-arms mac_work on an unregistered hw, and rc_work touches station state being torn down. Cancel both up front, alongside dump_work.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e57b7901469fc0b021930b83a8094baaf3d81b09 to before 13f230b8e3335ed761986fcd6b04049ff06471ebAffected e57b7901469fc0b021930b83a8094baaf3d81b09 to before 5dd845c6388c6c9a4085ecdf59c7fe7bf3398e2eAffected e57b7901469fc0b021930b83a8094baaf3d81b09 to before 7b3b1b3c7d434b5c5bc8d7de0b9c335242eeefbaAffected e57b7901469fc0b021930b83a8094baaf3d81b09 to before aca0cd273b486a078f936b3fb409e619673521b1Affected e57b7901469fc0b021930b83a8094baaf3d81b09 to before c4dc85481d38951ca7f8bc104e711936306cc664Affected e57b7901469fc0b021930b83a8094baaf3d81b09 to before e995d3dccc9d980af13a60ad37409ed1561f9eebAffected
LinuxLinux	5.8Affected before 5.8Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.57 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

e57b7901469fc0b021930b83a8094baaf3d81b09 to before 13f230b8e3335ed761986fcd6b04049ff06471ebAffected
e57b7901469fc0b021930b83a8094baaf3d81b09 to before 5dd845c6388c6c9a4085ecdf59c7fe7bf3398e2eAffected
e57b7901469fc0b021930b83a8094baaf3d81b09 to before 7b3b1b3c7d434b5c5bc8d7de0b9c335242eeefbaAffected
e57b7901469fc0b021930b83a8094baaf3d81b09 to before aca0cd273b486a078f936b3fb409e619673521b1Affected
e57b7901469fc0b021930b83a8094baaf3d81b09 to before c4dc85481d38951ca7f8bc104e711936306cc664Affected
e57b7901469fc0b021930b83a8094baaf3d81b09 to before e995d3dccc9d980af13a60ad37409ed1561f9eebAffected

LinuxLinux

5.8Affected
before 5.8Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.57 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.