Skip to content
Heist/ feed
High

wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash When an AER error occurs and the bus is hung, the register reads return 0xFFFFFFFF, causing the DMA queue state to be corrupted and resulting in an invalid memory access when accessing q->desc[] or q->entry[]. Unable to handle kernel paging request at virtual address ffffffc01099eac0 pc : mt76_dma_add_buf+0x124/0x188 [mt76] lr : mt76_dma_rx_fill+0x11c/0x1d8 [mt76] sp : ffffffc016d9bbf0 x29: ffffffc016d9bc10 x28: 0000000000000000 x27: 0000000000000000 x26: ffffffb7855e50b8 x25: ffffffb80d04f000 x24: 0000000000000000 x23: 0000000000000ec0 x22: ffffffb796803648 x21: ffffffb796801f80 x20: ffffffb7968035f8 x19: 0000000000000ec0 x18: 0000000000000000 x17: 000000004ec00000 x16: 000000000ec00000 x15: ffffffc01099eac0 x14: 000000004ec00000 x13: 00000000ffc5a000 x12: ffffffc016d9bc32 x11: 00000000ffffffff x10: 0000000000000002 x9 : 0000000000000000 x8 : 000000000000b4ac x7 : 0000000000000a20 x6 : ffffffb6c1806400 x5 : 0000000000000000 x4 : ffffffb80d04f000 x3 : 0000000000000000 x2 : 0000000000000001 x1 : 000000000ec04000 x0 : ffffffb7968035f8 Call trace: mt76_dma_add_buf+0x124/0x188 [mt76 (HASH:1029 4)] mt76_dma_rx_reset+0xe8/0xfc [mt76 (HASH:1029 4)] mt7921_wpdma_reset+0x188/0x1b0 [mt7921e (HASH:ee48 5)] mt7921e_mac_reset+0x128/0x418 [mt7921e (HASH:ee48 5)] mt7921_mac_reset_work+0xac/0x1a8 [mt7921_common (HASH:f721 6)] process_one_work+0x188/0x51

Announced Source revision 1
Original source ↗

CVE-2026-90379

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-90379

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "17f1de56df051229988aab37e01971c9713c4a31",
        "lessThan": "670b3dc4e3713542a9f002d38fb9d1740b9e342b",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "17f1de56df051229988aab37e01971c9713c4a31",
        "lessThan": "f544bcba4721e1074e9bc6666f0ef4f8b96ddba8",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "17f1de56df051229988aab37e01971c9713c4a31",
        "lessThan": "915672c5ae32deeb72f4572856d123f314791136",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/net/wireless/mediatek/mt76/dma.c",
      "drivers/net/wireless/mediatek/mt76/mcu.c",
      "drivers/net/wireless/mediatek/mt76/mt76_connac.h",
      "drivers/net/wireless/mediatek/mt76/mt7921/mac.c",
      "drivers/net/wireless/mediatek/mt76/mt7921/pci.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "4.16"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "4.16",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "6.18.52",
        "versionType": "semver",
        "lessThanOrEqual": "6.18.*"
      },
      {
        "status": "unaffected",
        "version": "7.2.6",
        "versionType": "semver",
        "lessThanOrEqual": "7.2.*"
      },
      {
        "status": "unaffected",
        "version": "7.3",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/net/wireless/mediatek/mt76/dma.c",
      "drivers/net/wireless/mediatek/mt76/mcu.c",
      "drivers/net/wireless/mediatek/mt76/mt76_connac.h",
      "drivers/net/wireless/mediatek/mt76/mt7921/mac.c",
      "drivers/net/wireless/mediatek/mt76/mt7921/pci.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2026-90379

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#36705 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement