CVE-2026-90365

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: cancel reset and rc work on device unregister

Both drivers cancelled dump_work on unregister but left reset_work and

rc_work to be flushed only by destroy_workqueue() in mt76_free_device(),

which runs after the hw is unregistered and the hardware stopped. A

reset_work that fires in that window calls ieee80211_restart_hw() and

re-arms mac_work on an unregistered hw, and rc_work touches station state

being torn down. Cancel both up front, alongside dump_work.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References