CVE-2026-90369

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix out-of-bounds access in mmio copy helpers mt76_mmio_write_copy() and mt76_mmio_read_copy() iterate up to ALIGN(len, 4), so a length that is not a multiple of four reads past the source buffer (write_copy) or writes past the destination (read_copy). Copy the aligned body in the loop and handle the remaining tail through a 4-byte bounce buffer, keeping the register access width unchanged.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 17, 2026
First seenSep 17, 2026

How to fix

Update
  • Linux Linux6ed0fba58bb125a8d8de96e391aa86111166efca, 6689b4a65e88d7b019e687fa9d6943ca070f3e43 or later

Affected products

ProductAffected versionsFixed in
Linux Linux2df00805f7dbaa46b60c682aad0d76270b7ba266 ≤ v < 6ed0fba58bb125a8d8de96e391aa86111166efca, 2df00805f7dbaa46b60c682aad0d76270b7ba266 ≤ v < 6689b4a65e88d7b019e687fa9d6943ca070f3e43, 6.196ed0fba58bb125a8d8de96e391aa86111166efca, 6689b4a65e88d7b019e687fa9d6943ca070f3e43

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.