{"id":25765,"date":"2026-09-18T04:31:51","date_gmt":"2026-09-17T20:31:51","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-90356"},"modified":"2026-09-18T04:31:51","modified_gmt":"2026-09-17T20:31:51","slug":"cve-2026-90356","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-90356","title":{"rendered":"CVE-2026-90356 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7996: f"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset<\/p>\n<p>mt7996_mac_reset_vif_iter() queues non-default vif links for kfree_rcu<br \/>\nwhile dev-&gt;wcid[] still holds pointers to the wcid embedded in each<br \/>\nfreed link; mt76_reset_device() then dereferences those entries and<br \/>\nruns mt76_wcid_cleanup() on them. If a grace period elapses in between,<br \/>\nthe cleanup operates on freed memory.<\/p>\n<p>Run mt76_reset_device() first, so the wcid entries are cleaned up and<br \/>\ncleared while the links are still valid.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset<\/p>\n<p>mt7996_mac_reset_vif_iter() queues non-default vif li<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-25765","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/25765","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25765"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25765"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25765"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}