OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-90372

HIGH · CVSS 7.1 EPSS 0.41%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of the mt7915 wireless driver, specifically in the function responsible for retrieving the number of spatial streams (nss) for a peer device. An underflow condition can occur when a peer's VHT/HE MCS map indicates no supported spatial streams, leading to incorrect values being written into the firmware's beamforming fields. Organizations using affected Linux systems, particularly those relying on the mt7915 driver for wireless connectivity, should prioritize addressing this issue to prevent potential instability or performance degradation in their network operations.

CVE
CVE-2026-90372
Severity
HIGH
CVSS
7.1
EPSS
0.41%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss If a peer's VHT/HE MCS map has no supported spatial stream (all fields 0x3), the loop exits with nss == 0 and the function returned (u8)-1 (255), which was then written into the firmware sta_rec_bf beamforming fields. Clamp the result to 0.