AZL-103011
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-103011.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-103011
- Upstream
- Published
- 2026-09-17T17:17:34Z
- Modified
- 2026-09-19T05:33:49Z
- Summary
- CVE-2026-90357 affecting package kernel 6.6.150.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement
The flow is added to dev->twt_list before sending the agreement to the firmware, but the error path leaves it linked while flowid_mask is never set. The flow slot can then be reused and memset while still on the list, corrupting twt_list, and station removal leaves a dangling entry behind that mt7915_mac_twt_sched_list_add() later walks.
- References