CVE-2026-90382

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mt76x02 component of the wifi driver where the kernel may trigger a warning when encountering an invalid rx descriptor length. In monitor mode with the fcsfail filter enabled, the hardware may pass corrupted frames that report a length exceeding the received buffer. While the bounds check correctly discards these frames, the use of a WARN ON ONCE wrapper causes the kernel to be tainted or panic if panic on warn is enabled. This behavior can be triggered by over-the-air garbage frames on busy channels, specifically observed with MT7612U hardware.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.