CVE-2026-90377 (GCVE-0-2026-90377)
Vulnerability from cvelistv5
Published
2026-09-17 16:09
Modified
2026-10-19 09:02
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix RX data queuing of RRO 3.0 For RRO 3.0, RX data released from a RRO data queue should be put to the indicator queue. The frames are processed and completed in the context of the indicator queue NAPI, which only polls skbs queued on the MT_RXQ_RRO_IND list; frames queued under the data queue id are left sitting on that list until the data queue NAPI happens to run, stalling and reordering RX data.
References
Impacted products
Vendor Product Version
Linux Linux Version: b1e58e137b61693f12da037d2d50aca9c2140a43
Version: b1e58e137b61693f12da037d2d50aca9c2140a43
Version: b1e58e137b61693f12da037d2d50aca9c2140a43
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/mediatek/mt76/mac80211.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "62aea1d45b524cde9e02d1e7f65d2c4fd60871b8",
              "status": "affected",
              "version": "b1e58e137b61693f12da037d2d50aca9c2140a43",
              "versionType": "git"
            },
            {
              "lessThan": "db4be207f3f6d8886f0b31f8c7db863a4b835ec1",
              "status": "affected",
              "version": "b1e58e137b61693f12da037d2d50aca9c2140a43",
              "versionType": "git"
            },
            {
              "lessThan": "86897f106669c07eea4c34b54c3268d448d41426",
              "status": "affected",
              "version": "b1e58e137b61693f12da037d2d50aca9c2140a43",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/mediatek/mt76/mac80211.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.18"
            },
            {
              "lessThan": "6.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.52",
                  "versionStartIncluding": "6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.6",
                  "versionStartIncluding": "6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3",
                  "versionStartIncluding": "6.18",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: fix RX data queuing of RRO 3.0\n\nFor RRO 3.0, RX data released from a RRO data queue should be put to\nthe indicator queue. The frames are processed and completed in the\ncontext of the indicator queue NAPI, which only polls skbs queued on\nthe MT_RXQ_RRO_IND list; frames queued under the data queue id are\nleft sitting on that list until the data queue NAPI happens to run,\nstalling and reordering RX data."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T09:02:35.874Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/62aea1d45b524cde9e02d1e7f65d2c4fd60871b8"
        },
        {
          "url": "https://git.kernel.org/stable/c/db4be207f3f6d8886f0b31f8c7db863a4b835ec1"
        },
        {
          "url": "https://git.kernel.org/stable/c/86897f106669c07eea4c34b54c3268d448d41426"
        }
      ],
      "title": "wifi: mt76: fix RX data queuing of RRO 3.0",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-90377",
    "datePublished": "2026-09-17T16:09:16.009Z",
    "dateReserved": "2026-09-11T19:38:34.808Z",
    "dateUpdated": "2026-10-19T09:02:35.874Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.