CVE-2026-90376

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP

Problem:

MCU command timeout while the firmware state is normal, and the

firmware keeps showing the error log "ERROR!! NO PAUSE...".

Root cause:

If the MLD_ID field in the TXD is neither the primary link id nor the

secondary link id, it may lead to a firmware busy loop when the third

link is in power saving mode.

Remap frames directed to a third link to the primary link wcid. Since

TX status events and txfree completions carry the wcid the firmware

saw, use the remapped wcid for packet id tracking and non-AQL packet

accounting as well, while the frame keeps its original link context

for addressing, band and OMAC selection.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References