CVE-2026-90353
High
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix ext PHY use-after-free on register error path After mt7915_register_ext_phy() succeeded, a failure of the main PHY mt7915_init_debugfs() or mt7915_coredump_register() unwound through free_phy2, which called ieee80211_free_hw() on the ext PHY hw while it was still registered with mac80211, since mt76_unregister_device() only unregisters the main hw. Unregister the ext PHY (thermal + phy + hw) first and skip the redundant free.
SeverityHigh
CVSS7.0
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linuxaa55bec92ba7747dd08feff409f8074c5e052e71, ad706fcf6255494613b94418e7243d98065dbeaf, 34058ad122f7524e33df8e38caba4b1d803b025a, a7fd3bae8e11a7c00df6a5021d9ef248ae9f9bf5, 648f5f03ff50d4bd719106ace0cdf1d8be02cbdd, 15b960014f24dce5388d4a2e7274e6490cb3c421 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 7b8e1ae886e45aed9274048f2836a70b75ecfa40 ≤ v < aa55bec92ba7747dd08feff409f8074c5e052e71, 7b8e1ae886e45aed9274048f2836a70b75ecfa40 ≤ v < ad706fcf6255494613b94418e7243d98065dbeaf, 7b8e1ae886e45aed9274048f2836a70b75ecfa40 ≤ v < 34058ad122f7524e33df8e38caba4b1d803b025a, 7b8e1ae886e45aed9274048f2836a70b75ecfa40 ≤ v < a7fd3bae8e11a7c00df6a5021d9ef248ae9f9bf5, 7b8e1ae886e45aed9274048f2836a70b75ecfa40 ≤ v < 648f5f03ff50d4bd719106ace0cdf1d8be02cbdd, 7b8e1ae886e45aed9274048f2836a70b75ecfa40 ≤ v < 15b960014f24dce5388d4a2e7274e6490cb3c421, 5.19 | aa55bec92ba7747dd08feff409f8074c5e052e71, ad706fcf6255494613b94418e7243d98065dbeaf, 34058ad122f7524e33df8e38caba4b1d803b025a, a7fd3bae8e11a7c00df6a5021d9ef248ae9f9bf5, 648f5f03ff50d4bd719106ace0cdf1d8be02cbdd, 15b960014f24dce5388d4a2e7274e6490cb3c421 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.