CVE-2026-90368

wifi: mt76: mt7915: unwind state on add_interface failure

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 30, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7915: unwind state on add_interface failure

When mt76_wcid_alloc() fails, mt7915_add_interface() returned without clearing the vif_mask/omac_mask bits it had already set, without removing the firmware dev info added earlier, and without clearing a monitor_vif pointer to the vif mac80211 is about to free. mac80211 does not call remove_interface() for a failed add, so the indices and firmware dev entry leaked permanently and testmode could dereference the stale monitor_vif. Add a proper error unwind.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b619e01380eedf24e8d26a367e94e0ccaeb0c3dd to before 09f3dced52c22d9b20f356b01986c5ea0f446ceaAffected b619e01380eedf24e8d26a367e94e0ccaeb0c3dd to before 7198d8fcfdd3ebef3dfbb6073267a053b09f6a05Affected b619e01380eedf24e8d26a367e94e0ccaeb0c3dd to before 218fdf0fcb796b8d281dbdd4a6144c5a8fc7fd0fAffected b619e01380eedf24e8d26a367e94e0ccaeb0c3dd to before 507eddb8175a67df5086354b92d6a4fd7f6f1f96Affected b619e01380eedf24e8d26a367e94e0ccaeb0c3dd to before 71bf9de2ab3fb2c54bedb0b4c9b468d2e1d55280Affected b619e01380eedf24e8d26a367e94e0ccaeb0c3dd to before 2fb6480c52f611338e1b0abe5e6219be1fc9ab75Affected
LinuxLinux	5.19Affected before 5.19Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

b619e01380eedf24e8d26a367e94e0ccaeb0c3dd to before 09f3dced52c22d9b20f356b01986c5ea0f446ceaAffected
b619e01380eedf24e8d26a367e94e0ccaeb0c3dd to before 7198d8fcfdd3ebef3dfbb6073267a053b09f6a05Affected
b619e01380eedf24e8d26a367e94e0ccaeb0c3dd to before 218fdf0fcb796b8d281dbdd4a6144c5a8fc7fd0fAffected
b619e01380eedf24e8d26a367e94e0ccaeb0c3dd to before 507eddb8175a67df5086354b92d6a4fd7f6f1f96Affected
b619e01380eedf24e8d26a367e94e0ccaeb0c3dd to before 71bf9de2ab3fb2c54bedb0b4c9b468d2e1d55280Affected
b619e01380eedf24e8d26a367e94e0ccaeb0c3dd to before 2fb6480c52f611338e1b0abe5e6219be1fc9ab75Affected

LinuxLinux

5.19Affected
before 5.19Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.