CVE-2026-90351

CVE-2026-90351

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
10.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed

If the WED attach for the primary PCIe function fails, the probe path

still attached wed_hif2 for the secondary function, leaving the device

in an inconsistent half-WED configuration that crashes later. The hif2

call also re-enabled hwrro_mode, which the failed primary attach had

just turned off.

Skip the hif2 WED setup when the primary WED device is not active.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.5th percentile
Published
2026-09-17T21:17Z
References (4)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:08Z
    wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed
    cvelistv5