https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 13:24:46 +0000 https://db.gcve.eu/vuln/cve-2026-90375 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mt76: fix non-AQL packet accounting for MLO stations</p> <p>__mt76_tx_queue_skb() overrides the wcid passed by the driver with sta-&gt;drv_priv, so the wcid might incorrectly be changed after TX, causing wcid-&gt;non_aql_packets to be counted on the wrong wcid. For example, on the AP side, if a station&#39;s setup link is the 5G link and the station uses 2G to transmit a frame, the value of non_aql_packets is increased on the 5G wcid but decreased on the 2G wcid. Once the inflated counter exceeds MT_MAX_NON_AQL_PKT, the TX scheduler permanently refuses to service the station.</p> <p>Drop the reassignment and account on the wcid used for transmission. This also records the actual wcid in the queue entry.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mt76: fix non-AQL packet accounting for MLO stations</p> <p>__mt76_tx_queue_skb() overrides the wcid passed by the driver with sta-&gt;drv_priv, so the wcid might incorrectly be changed after TX, causing wcid-&gt;non_aql_packets to be counted on the wrong wcid. For example, on the AP side, if a station&#39;s setup link is the 5G link and the station uses 2G to transmit a frame, the value of non_aql_packets is increased on the 5G wcid but decreased on the 2G wcid. Once the inflated counter exceeds MT_MAX_NON_AQL_PKT, the TX scheduler permanently refuses to service the station.</p> <p>Drop the reassignment and account on the wcid used for transmission. This also records the actual wcid in the queue entry.</p> https://db.gcve.eu/vuln/cve-2026-90375