{"cve":"CVE-2026-90356","nvd":{"published":"2026-09-17T17:17:34.480","modified":"2026-10-19T09:19:29.593","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7996: free vif links after clearing wcid entries on full reset\n\nmt7996_mac_reset_vif_iter() queues non-default vif links for kfree_rcu\nwhile dev->wcid[] still holds pointers to the wcid embedded in each\nfreed link; mt76_reset_device() then dereferences those entries and\nruns mt76_wcid_cleanup() on them. If a grace period elapses in between,\nthe cleanup operates on freed memory.\n\nRun mt76_reset_device() first, so the wcid entries are cleaned up and\ncleared while the links are still valid.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/2b10eb3636d0c4cb6b763e045ec1294dbd70f5ad","https://git.kernel.org/stable/c/7e4208e9f6a876c2b7d28fdb6b86dff3b05db2f7","https://git.kernel.org/stable/c/8826d7a5e2dd727aa96456ccd58b33d2b080e935"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:55:23.253742848+00:00"},"epss":{"cve":"CVE-2026-90356","score":0.00206,"percentile":0.10602,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}