Answer in brief
CVE-2026-90372 records a Unknown severity vulnerability in wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=89029a85482cbcf68026a89fc974e8f6898d6b37 <2801477c36a19be4f549fe60e54995f03b0ea7b9 || >=89029a85482cbcf68026a89fc974e8f6898d6b37 <38f4d6323bcd65e41a691432eddabd2b03acdeee || >=89029a85482cbcf68026a89fc974e8f6898d6b37 <25f753f7f620955a8a51e63e445d8b9076c51396 || >=89029a85482cbcf68026a89fc974e8f6898d6b37 <e63c6291ecddf94769ab91f9d8cdb6ca939f7fc6 || >=89029a85482cbcf68026a89fc974e8f6898d6b37 <85bd46ab7674b6d357f9a14791352c65fb09eee9 || >=89029a85482cbcf68026a89fc974e8f6898d6b37 <6ce78d04c7ea4b66838941b5a4232dd1ee0e2cc7 || >=89029a85482cbcf68026a89fc974e8f6898d6b37 <ecfd1a07e78c31d81322fb2d81dc468081cc3004 || >=89029a85482cbcf68026a89fc974e8f6898d6b37 <4a2f4be532e3ea4e2b536e411793a05aaa51af25 | 2801477c36a19be4f549fe60e54995f03b0ea7b9, 38f4d6323bcd65e41a691432eddabd2b03acdeee, 25f753f7f620955a8a51e63e445d8b9076c51396, e63c6291ecddf94769ab91f9d8cdb6ca939f7fc6, 85bd46ab7674b6d357f9a14791352c65fb09eee9, 6ce78d04c7ea4b66838941b5a4232dd1ee0e2cc7, ecfd1a07e78c31d81322fb2d81dc468081cc3004, 4a2f4be532e3ea4e2b536e411793a05aaa51af25 |
| Linux/Linuxgeneric | 5.8 | Not reported |
Published upstream
Sep 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 17, 2026
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss If a peer's VHT/HE MCS map has no supported spatial stream (all fields 0x3), the loop exits with nss == 0 and the function returned (u8)-1 (255), which was then written into the firmware sta_rec_bf beamforming fields. Clamp the result to 0.
Quoted source text, attributed separately from HOL analysis.