CVE-2026-90371
8.8
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: fix RXDMAD_C buffer recycling race
The RXDMAD_C buffers come from the RRO data queues' page pools, which are bound to a different NAPI, so the direct page-pool recycle used here could race the owning NAPI; take the non-direct path as is already done for WED RX queues.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | e50d4d710efd2dbc46965e9608bbb502bcfc5c99 < 7ac05ed3a50e511c93f8506e555709a208dfce0a | affected |
| Linux | Linux | e50d4d710efd2dbc46965e9608bbb502bcfc5c99 < a273dc3b86a7d983d643827d3d3c795d55d8f632 | affected |
| Linux | Linux | e50d4d710efd2dbc46965e9608bbb502bcfc5c99 < e1f97c10a4ec2b9db69a134b757304399ca903ce | affected |
| Linux | Linux | 6.18 | affected |
| Linux | Linux | 0 < 6.18 | unaffected |
| Linux | Linux | 6.18.52 <= 6.18.* | unaffected |
| Linux | Linux | 7.2.6 <= 7.2.* | unaffected |
| Linux | Linux | 7.3-rc1 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/7ac05ed3a50e511c93f8506e555709a208dfce0a
- https://git.kernel.org/stable/c/a273dc3b86a7d983d643827d3d3c795d55d8f632
- https://git.kernel.org/stable/c/e1f97c10a4ec2b9db69a134b757304399ca903ce
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.