CVE-2026-90365

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mt76 wifi driver where reset work and rc work are not cancelled during device unregistration. While dump work is cancelled, the other two tasks are only flushed during destroy workqueue() within the mt76 free device() function, which occurs after the hardware is unregistered and stopped. If reset work executes during this window, it triggers ieee80211 restart hw() and re-arms mac work on unregistered hardware. Additionally, rc work may attempt to access station state that is currently being torn down.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.