CVE-2026-90403

wifi: rtlwifi: pci: fix error path in rtl_pci_probe()

State: Published
Severity: 7.0 High
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtlwifi: pci: fix error path in rtl_pci_probe()

In the last error path in rtl_pci_probe(), the cleanup functions are skipped due to a wrong goto label. Moreover, the successful call to rtl_init_rfkill(), ieee80211_register_hw(), rtl_debug_add_one() have to be reverted. Fix this issue by updating the labels and adding the relevant cleanup functions to the last error path.

Scores

CVSS	Score	Vector	Source
3.1	7.0 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0c8173385e549f95cd80c3fff5aab87b4f881d8d to before 2634998247d24be34ba16a7666f31815ef1da00bAffected 0c8173385e549f95cd80c3fff5aab87b4f881d8d to before cfd6824dd1d151ab3abc00117b3774c8056006e0Affected 0c8173385e549f95cd80c3fff5aab87b4f881d8d to before 86e6187f8525c8f8219eb49e022eba854cc6ab86Affected 0c8173385e549f95cd80c3fff5aab87b4f881d8d to before aef178ffae5420afdbf46f7133ed28bd4248e15cAffected 0c8173385e549f95cd80c3fff5aab87b4f881d8d to before b42fcfb097da46f0e86564736ced939e83cb8442Affected 0c8173385e549f95cd80c3fff5aab87b4f881d8d to before a89818977338ba71194b1ab1d071f0c0848b1e13Affected 0c8173385e549f95cd80c3fff5aab87b4f881d8d to before 1b68b6e529ce75112fab98e89583a76370ca394bAffected 0c8173385e549f95cd80c3fff5aab87b4f881d8d to before 3c2999d13eeb222ae56631aeb7ca248090f2b210Affected
LinuxLinux	2.6.38Affected before 2.6.38Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

0c8173385e549f95cd80c3fff5aab87b4f881d8d to before 2634998247d24be34ba16a7666f31815ef1da00bAffected
0c8173385e549f95cd80c3fff5aab87b4f881d8d to before cfd6824dd1d151ab3abc00117b3774c8056006e0Affected
0c8173385e549f95cd80c3fff5aab87b4f881d8d to before 86e6187f8525c8f8219eb49e022eba854cc6ab86Affected
0c8173385e549f95cd80c3fff5aab87b4f881d8d to before aef178ffae5420afdbf46f7133ed28bd4248e15cAffected
0c8173385e549f95cd80c3fff5aab87b4f881d8d to before b42fcfb097da46f0e86564736ced939e83cb8442Affected
0c8173385e549f95cd80c3fff5aab87b4f881d8d to before a89818977338ba71194b1ab1d071f0c0848b1e13Affected
0c8173385e549f95cd80c3fff5aab87b4f881d8d to before 1b68b6e529ce75112fab98e89583a76370ca394bAffected
0c8173385e549f95cd80c3fff5aab87b4f881d8d to before 3c2999d13eeb222ae56631aeb7ca248090f2b210Affected

LinuxLinux

2.6.38Affected
before 2.6.38Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.