CVE-2026-90374Published

wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[]

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2026-90374

Published

Linux

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "unaffected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "drivers/net/wireless/mediatek/mt76/mt7996/mac.c"
                    ],
                    "versions": [
                        {
                            "version": "98686cd21624c75a043e96812beadddf4f6f48e5",
                            "lessThan": "493a029c205a994644327d554f0cfeb9651aba7c",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "98686cd21624c75a043e96812beadddf4f6f48e5",
                            "lessThan": "535091c587268cc783608642838a655d828eefdd",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "98686cd21624c75a043e96812beadddf4f6f48e5",
                            "lessThan": "0f53ece876e1f3bbb3e18f48afc4af1ee967b16c",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "98686cd21624c75a043e96812beadddf4f6f48e5",
                            "lessThan": "b1c5cf8903bec5476a2233b4e45287b9a2213e02",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "98686cd21624c75a043e96812beadddf4f6f48e5",
                            "lessThan": "2243778a5fae8329ab5f18e7adcd7e03b911a1b7",
                            "status": "affected",
                            "versionType": "git"
                        }
                    ]
                }

Linux

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "affected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "drivers/net/wireless/mediatek/mt76/mt7996/mac.c"
                    ],
                    "versions": [
                        {
                            "version": "6.2",
                            "status": "affected"
                        },
                        {
                            "version": "0",
                            "lessThan": "6.2",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.6.160",
                            "lessThanOrEqual": "6.6.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.12.110",
                            "lessThanOrEqual": "6.12.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.18.52",
                            "lessThanOrEqual": "6.18.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "7.2.6",
                            "lessThanOrEqual": "7.2.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "7.3",
                            "lessThanOrEqual": "*",
                            "status": "unaffected",
                            "versionType": "original_commit_for_fix"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON