CVE-2026-90403wifi: rtlwifi: pci: fix error path in rtl_pci_probe()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: pci: fix error path in rtl_pci_probe() In the last error path in rtl_pci_probe(), the cleanup functions are skipped due to a wrong goto label. Moreover, the successful call to rtl_init_rfkill(), ieee80211_register_hw(), rtl_debug_add_one() have to be reverted. Fix this issue by updating the labels and adding the relevant cleanup functions to the last error path.
- CVSS
- 7.0 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 18, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 0c8173385e549f95cd80c3fff5aab87b4f881d8d before 2634998247d24be34ba16a7666f31815ef1da00b; from 0c8173385e549f95cd80c3fff5aab87b4f881d8d before cfd6824dd1d151ab3abc00117b3774c8056006e0; from 0c8173385e549f95cd80c3fff5aab87b4f881d8d before 86e6187f8525c8f8219eb49e022eba854cc6ab86; from 0c8173385e549f95cd80c3fff5aab87b4f881d8d before aef178ffae5420afdbf46f7133ed28bd4248e15c; from 0c8173385e549f95cd80c3fff5aab87b4f881d8d before b42fcfb097da46f0e86564736ced939e83cb8442; from 0c8173385e549f95cd80c3fff5aab87b4f881d8d before a89818977338ba71194b1ab1d071f0c0848b1e13; from 0c8173385e549f95cd80c3fff5aab87b4f881d8d before 1b68b6e529ce75112fab98e89583a76370ca394b; from 0c8173385e549f95cd80c3fff5aab87b4f881d8d before 3c2999d13eeb222ae56631aeb7ca248090f2b210 | CNA record |
References
- https://git.kernel.org/stable/c/2634998247d24be34ba16a7666f31815ef1da00b
- https://git.kernel.org/stable/c/cfd6824dd1d151ab3abc00117b3774c8056006e0
- https://git.kernel.org/stable/c/86e6187f8525c8f8219eb49e022eba854cc6ab86
- https://git.kernel.org/stable/c/aef178ffae5420afdbf46f7133ed28bd4248e15c
- https://git.kernel.org/stable/c/b42fcfb097da46f0e86564736ced939e83cb8442
- https://git.kernel.org/stable/c/a89818977338ba71194b1ab1d071f0c0848b1e13
- https://git.kernel.org/stable/c/1b68b6e529ce75112fab98e89583a76370ca394b
- https://git.kernel.org/stable/c/3c2999d13eeb222ae56631aeb7ca248090f2b210
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.