CVE-2026-90352
Published Sep 17, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: release hif2 reference on probe IRQ failure The hif2 reference obtained by mt7915_pci_init_hif2() is only released on error paths that key off dev->hif2, which is not assigned until after the IRQ setup. If pci_alloc_irq_vectors() or the primary devm_request_irq() fails, the reference leaks. Drop it explicitly on those paths via mt7915_put_hif2().
Is your site exposed to CVE-2026-90352?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/2a434d2637b9c9be9bcc8a84dc46880cc1446643
https://git.kernel.org/stable/c/5c30a6350a300fbb800831f1b4373b2f59e03410
https://git.kernel.org/stable/c/8370aebd26a9dfa2e0de665e3ab504c0e97ee730
https://git.kernel.org/stable/c/8a2e38019846da29a112fac4dd96fe5bfa298faf
https://git.kernel.org/stable/c/ed5cc46a3c8f4fe7f549c661914d8d835169acc0
https://git.kernel.org/stable/c/fb9c7b4c238b4e5469a11a1fb8cf332f6193b995
Frequently Asked Questions
What is CVE-2026-90352? +
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: release hif2 reference on probe IRQ failure
The hif2 reference obtained by mt7915_pci_init_hif2() is only released on
error paths that key off dev->hif2, which is not assigned until after the
IRQ setup. If pci_alloc_irq_vectors() or the primary devm_request_irq()
fails, the reference leaks. Drop it explicitly on those paths via
mt7915_put_hif2().
How do I check if I'm vulnerable to CVE-2026-90352? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.