CVE-2026-90372

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-90372
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90372.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-90372
Downstream
Published
2026-09-17T16:09:12Z
Modified
2026-09-19T03:47:26Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVSS Calculator
Summary
wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss

If a peer's VHT/HE MCS map has no supported spatial stream (all fields 0x3), the loop exits with nss == 0 and the function returned (u8)-1 (255), which was then written into the firmware sta_rec_bf beamforming fields. Clamp the result to 0.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90372.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
89029a85482cbcf68026a89fc974e8f6898d6b37
Fixed
2801477c36a19be4f549fe60e54995f03b0ea7b9
Fixed
38f4d6323bcd65e41a691432eddabd2b03acdeee
Fixed
25f753f7f620955a8a51e63e445d8b9076c51396
Fixed
e63c6291ecddf94769ab91f9d8cdb6ca939f7fc6
Fixed
85bd46ab7674b6d357f9a14791352c65fb09eee9
Fixed
6ce78d04c7ea4b66838941b5a4232dd1ee0e2cc7
Fixed
ecfd1a07e78c31d81322fb2d81dc468081cc3004
Fixed
4a2f4be532e3ea4e2b536e411793a05aaa51af25

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90372.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.8.0
Fixed
5.10.270
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.221
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.188
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.157
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.110
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.52
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90372.json"