OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-90371

HIGH · CVSS 8.8 EPSS 0.38%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

A vulnerability exists in the Linux kernel's handling of RXDMAD_C buffers, which can lead to a race condition due to improper recycling from RRO data queues' page pools. This issue may compromise the stability and security of systems utilizing affected Linux versions, particularly those relying on the mt76 Wi-Fi driver. Linux administrators and developers should prioritize patching this vulnerability to mitigate potential disruptions in network performance and security.

CVE
CVE-2026-90371
Severity
HIGH
CVSS
8.8
EPSS
0.38%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix RXDMAD_C buffer recycling race The RXDMAD_C buffers come from the RRO data queues' page pools, which are bound to a different NAPI, so the direct page-pool recycle used here could race the owning NAPI; take the non-direct path as is already done for WED RX queues.