Riskcovery

CVE-2026-90371

wifi: mt76: fix RXDMAD_C buffer recycling race

State
Published
Severity
8.8 High
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: fix RXDMAD_C buffer recycling race

The RXDMAD_C buffers come from the RRO data queues' page pools, which are bound to a different NAPI, so the direct page-pool recycle used here could race the owning NAPI; take the non-direct path as is already done for WED RX queues.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e50d4d710efd2dbc46965e9608bbb502bcfc5c99 to before 7ac05ed3a50e511c93f8506e555709a208dfce0aAffected
  • e50d4d710efd2dbc46965e9608bbb502bcfc5c99 to before a273dc3b86a7d983d643827d3d3c795d55d8f632Affected
  • e50d4d710efd2dbc46965e9608bbb502bcfc5c99 to before e1f97c10a4ec2b9db69a134b757304399ca903ceAffected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.