CVE-2026-90352wifi: mt76: mt7915: release hif2 reference on probe IRQ failure
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: release hif2 reference on probe IRQ failure The hif2 reference obtained by mt7915_pci_init_hif2() is only released on error paths that key off dev->hif2, which is not assigned until after the IRQ setup. If pci_alloc_irq_vectors() or the primary devm_request_irq() fails, the reference leaks. Drop it explicitly on those paths via mt7915_put_hif2().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from f68d67623dec9445960b52a0e9e8e60297596b4b before 8a2e38019846da29a112fac4dd96fe5bfa298faf; from f68d67623dec9445960b52a0e9e8e60297596b4b before 2a434d2637b9c9be9bcc8a84dc46880cc1446643; from f68d67623dec9445960b52a0e9e8e60297596b4b before 5c30a6350a300fbb800831f1b4373b2f59e03410; from f68d67623dec9445960b52a0e9e8e60297596b4b before ed5cc46a3c8f4fe7f549c661914d8d835169acc0; from f68d67623dec9445960b52a0e9e8e60297596b4b before fb9c7b4c238b4e5469a11a1fb8cf332f6193b995; from f68d67623dec9445960b52a0e9e8e60297596b4b before 8370aebd26a9dfa2e0de665e3ab504c0e97ee730 | CNA record |
References
- https://git.kernel.org/stable/c/8a2e38019846da29a112fac4dd96fe5bfa298faf
- https://git.kernel.org/stable/c/2a434d2637b9c9be9bcc8a84dc46880cc1446643
- https://git.kernel.org/stable/c/5c30a6350a300fbb800831f1b4373b2f59e03410
- https://git.kernel.org/stable/c/ed5cc46a3c8f4fe7f549c661914d8d835169acc0
- https://git.kernel.org/stable/c/fb9c7b4c238b4e5469a11a1fb8cf332f6193b995
- https://git.kernel.org/stable/c/8370aebd26a9dfa2e0de665e3ab504c0e97ee730
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.