CVE-2026-90375

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix non-AQL packet accounting for MLO stations __mt76_tx_queue_skb() overrides the wcid passed by the driver with sta->drv_priv, so the wcid might incorrectly be changed after TX, causing wcid->non_aql_packets to be counted on the wrong wcid. For example, on the AP side, if a station's setup link is the 5G link and the station uses 2G to transmit a frame, the value of non_aql_packets is increased on the 5G wcid but decreased on the 2G wcid. Once the inflated counter exceeds MT_MAX_NON_AQL_PKT, the TX scheduler permanently refuses to service the station. Drop the reassignment and account on the wcid used for transmission. This also records the actual wcid in the queue entry.

• https://git.kernel.org/stable/c/186c957ac3325aefb982567ffdd3654b283688a7
• https://git.kernel.org/stable/c/8ae659743ba936b22ecb4620815887728e2820d6
• https://git.kernel.org/stable/c/f85f6933cc170155f1c7c2dffdd014965787c71b
• https://git.kernel.org/stable/c/fc7fae55255ccbde009232e84b102d2782a69ecf

Published

Sep 17, 2026

Last Modified

Sep 17, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9037A firmware update mechanism in the affected charging control…9.3
• CVE-2026-90370In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90371In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-90372In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-90373In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90374In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90376In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90377In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90378In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90379In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-9038A stack-based buffer overflow vulnerability in the charging …8.6
• CVE-2026-90380In the Linux kernel, the following vulnerability has been re…8.8