01 Record

CVE-2026-90352

wifi: mt76: mt7915: release hif2 reference on probe IRQ failure

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

wifi: mt76: mt7915: release hif2 reference on probe IRQ failure

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.20% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 10.4% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-17 16:08Z1 MO AGO

Last updated

2026-10-19 09:02Z10 DAYS AGO

Reserved

2026-09-11

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-772Missing Release of Resource after Effective LifetimeBase

Data version

5.2

Document digest

d13f0926b4fe375266e2cbe765f4e8e9c739a92c5919c5adda9337ea7f5a22b0

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxf68d67623dec9445960b52a0e9e8e60297596b4b to < 8a2e38019846da29a112fac4dd96fe5bfa298faf, f68d67623dec9445960b52a0e9e8e60297596b4b to < 2a434d2637b9c9be9bcc8a84dc46880cc1446643, f68d67623dec9445960b52a0e9e8e60297596b4b to < 5c30a6350a300fbb800831f1b4373b2f59e03410, f68d67623dec9445960b52a0e9e8e60297596b4b to < ed5cc46a3c8f4fe7f549c661914d8d835169acc0, f68d67623dec9445960b52a0e9e8e60297596b4b to < fb9c7b4c238b4e5469a11a1fb8cf332f6193b995, f68d67623dec9445960b52a0e9e8e60297596b4b to < 8370aebd26a9dfa2e0de665e3ab504c0e97ee730, 5.19—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/8a2e38019846da29a112fac4dd96fe5bfa298faf
git.kernel.orghttps://git.kernel.org/stable/c/2a434d2637b9c9be9bcc8a84dc46880cc1446643
git.kernel.orghttps://git.kernel.org/stable/c/5c30a6350a300fbb800831f1b4373b2f59e03410
git.kernel.orghttps://git.kernel.org/stable/c/ed5cc46a3c8f4fe7f549c661914d8d835169acc0
git.kernel.orghttps://git.kernel.org/stable/c/fb9c7b4c238b4e5469a11a1fb8cf332f6193b995
git.kernel.orghttps://git.kernel.org/stable/c/8370aebd26a9dfa2e0de665e3ab504c0e97ee730

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.