In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed
If the WED attach for the primary PCIe function fails, the probe path
still attached wed_hif2 for the secondary function, leaving the device
in an inconsistent half-WED configuration that crashes later. The hif2
call also re-enabled hwrro_mode, which the failed primary attach had
just turned off.
Skip the hif2 WED setup when the primary WED device is not active.
CVE-2026-90351
NONE
EPSS 0.20%
Updated Sep 17, 2026
Linux
https://git.kernel.org/stable/c/76144da3c6184c7850631ad79d0600ac8bf7649a
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7c1924332e986019c6bcddf55c843361cccac73f
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d566387df8306257d2f703a0d99fd9896400317e
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVE Details
CVE ID
CVE-2026-90351
Published Date
Sep 17, 2026
Vendor
Linux
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.20%
Likelihood of exploitation in next 30 days
Percentile:
9.8th percentile (higher than 9.8% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory