CVE-2026-90365
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: cancel reset and rc work on device unregister Both drivers cancelled dump_work on unregister but left reset_work and rc_work to be flushed only by destroy_workqueue() in mt76_free_device(), which runs after the hw is unregistered and the hardware stopped. A reset_work that fires in that window calls ieee80211_restart_hw() and re-arms mac_work on an unregistered hw, and rc_work touches station state being torn down. Cancel both up front, alongside dump_work.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linux13f230b8e3335ed761986fcd6b04049ff06471eb, 5dd845c6388c6c9a4085ecdf59c7fe7bf3398e2e, 7b3b1b3c7d434b5c5bc8d7de0b9c335242eeefba, aca0cd273b486a078f936b3fb409e619673521b1, c4dc85481d38951ca7f8bc104e711936306cc664, e995d3dccc9d980af13a60ad37409ed1561f9eeb or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | e57b7901469fc0b021930b83a8094baaf3d81b09 ≤ v < 13f230b8e3335ed761986fcd6b04049ff06471eb, e57b7901469fc0b021930b83a8094baaf3d81b09 ≤ v < 5dd845c6388c6c9a4085ecdf59c7fe7bf3398e2e, e57b7901469fc0b021930b83a8094baaf3d81b09 ≤ v < 7b3b1b3c7d434b5c5bc8d7de0b9c335242eeefba, e57b7901469fc0b021930b83a8094baaf3d81b09 ≤ v < aca0cd273b486a078f936b3fb409e619673521b1, e57b7901469fc0b021930b83a8094baaf3d81b09 ≤ v < c4dc85481d38951ca7f8bc104e711936306cc664, e57b7901469fc0b021930b83a8094baaf3d81b09 ≤ v < e995d3dccc9d980af13a60ad37409ed1561f9eeb, 5.8 | 13f230b8e3335ed761986fcd6b04049ff06471eb, 5dd845c6388c6c9a4085ecdf59c7fe7bf3398e2e, 7b3b1b3c7d434b5c5bc8d7de0b9c335242eeefba, aca0cd273b486a078f936b3fb409e619673521b1, c4dc85481d38951ca7f8bc104e711936306cc664, e995d3dccc9d980af13a60ad37409ed1561f9eeb |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.