CVE-2026-90357 Linux CVE debrief

Who should care

Defenders responsible for Linux kernel deployments, particularly those using the mt76 mt7915 driver, should assess exposure and prioritize patching. System administrators and security teams managing Linux-based systems, especially those with wifi functionality, should review and update their inventory, monitor for suspicious behavior, and verify proper firmware agreement handling in mt7915 configurations.

Why it matters

CVE-2026-90357 is a high-severity vulnerability in the Linux kernel's wifi mt76 mt7915 driver that can cause denial of service or potentially lead to code execution. Defenders should prioritize patching, review and update inventory, and monitor for suspicious behavior.

• Denial of service due to potential list corruption and crashes
• Possible code execution if exploited
• Need for patching and updating affected systems
• Importance of monitoring for suspicious wifi driver behavior

Technical summary

The Linux kernel's wifi mt76 mt7915 driver has a vulnerability that can cause a denial of service or potentially lead to code execution if exploited. The issue arises from improper handling of TWT flow agreements with the firmware, leading to potential list corruption and crashes. The vulnerability has a CVSS score of 8.8 and is considered high severity. The vulnerability affects Linux kernel deployments using the mt76 mt7915 driver, particularly those with wifi functionality. Defenders should prioritize patching affected systems, reviewing and updating inventory for Linux kernel deployments, and monitoring for suspicious wifi driver behavior. The vulnerability can be addressed by applying patches from kernel

Defensive priority

Defenders should prioritize patching affected systems, reviewing and updating inventory for Linux kernel deployments, and monitoring for suspicious wifi driver behavior.

Recommended defensive actions

• Apply patches from kernel.org for the mt76 mt7915 driver
• Review and update inventory for Linux kernel deployments using affected drivers
• Monitor for suspicious wifi driver behavior and crashes
• Verify proper firmware agreement handling in mt7915 configurations
• Perform compensating controls for exposed systems while remediation is scheduled and verified
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its CVSS score and affected components. Multiple source references from kernel.org are provided, detailing the specific commits addressing the issue.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.