Количество 4
Количество 4
CVE-2026-90357
(In the Linux kernel, the following vulnerability has been resolved: w ...)
CVE-2026-90357
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement The flow is added to dev->twt_list before sending the agreement to the firmware, but the error path leaves it linked while flowid_mask is never set. The flow slot can then be reused and memset while still on the list, corrupting twt_list, and station removal leaves a dangling entry behind that mt7915_mac_twt_sched_list_add() later walks.
CVE-2026-90357
In the Linux kernel, the following vulnerability has been resolved: w ...
GHSA-9px9-hrqm-cp96
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement The flow is added to dev->twt_list before sending the agreement to the firmware, but the error path leaves it linked while flowid_mask is never set. The flow slot can then be reused and memset while still on the list, corrupting twt_list, and station removal leaves a dangling entry behind that mt7915_mac_twt_sched_list_add() later walks.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-90357 (In the Linux kernel, the following vulnerability has been resolved: w ...) | CVSS3: 8.8 | 0% Низкий | 4 дня назад |
 | CVE-2026-90357 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement The flow is added to dev->twt_list before sending the agreement to the firmware, but the error path leaves it linked while flowid_mask is never set. The flow slot can then be reused and memset while still on the list, corrupting twt_list, and station removal leaves a dangling entry behind that mt7915_mac_twt_sched_list_add() later walks. | CVSS3: 8.8 | 0% Низкий | 4 дня назад |
| CVE-2026-90357 In the Linux kernel, the following vulnerability has been resolved: w ... | CVSS3: 8.8 | 0% Низкий | 4 дня назад |
| GHSA-9px9-hrqm-cp96 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement The flow is added to dev->twt_list before sending the agreement to the firmware, but the error path leaves it linked while flowid_mask is never set. The flow slot can then be reused and memset while still on the list, corrupting twt_list, and station removal leaves a dangling entry behind that mt7915_mac_twt_sched_list_add() later walks. | CVSS3: 8.8 | 0% Низкий | 4 дня назад |
Уязвимостей на страницу