CVE-2026-90373

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mt7915 remove interface() function where the wcid mask bit is cleared without a lock and before the RCU wcid pointer is cleared. Because the mask is a non-atomic Read-Modify-Write (RMW) shared with allocators running under dev->mt76.mutex, a race condition can occur during add interface or sta add operations on other bands in Dual-Band Dual-Concurrent (DBDC) configurations. This can lead to wcid leaks, double-hand-out of wcids, or the accidental wiping of a newly published wcid if a concurrent allocation reuses the index before the NULL assignment occurs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.