Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-90372 Details

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss If a peer's VHT/HE MCS map has no supported spatial stream (all fields 0x3), the loop exits with nss == 0 and the function returned (u8)-1 (255), which was then written into the firmware sta_rec_bf beamforming fields. Clamp the result to 0.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: kernel.orgCVSS-B:7.1 HIGHVector:CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/25f753f7f620955a8a51e63e445d8b9076c51396 kernel.org
https://git.kernel.org/stable/c/2801477c36a19be4f549fe60e54995f03b0ea7b9 kernel.org
https://git.kernel.org/stable/c/38f4d6323bcd65e41a691432eddabd2b03acdeee kernel.org
https://git.kernel.org/stable/c/4a2f4be532e3ea4e2b536e411793a05aaa51af25 kernel.org
https://git.kernel.org/stable/c/6ce78d04c7ea4b66838941b5a4232dd1ee0e2cc7 kernel.org

see all 8 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-90372
NVD Published Date:
Sep 17, 2026
NVD Last Modified:
Sep 18, 2026
Source:
kernel.org
CVE-2026-90372 Details - Not Deferred