CVE-2026-90352: wifi: mt76: mt7915: release hif2 reference on probe IRQ failure
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: release hif2 reference on probe IRQ failure
The hif2 reference obtained by mt7915pciinithif2() is only released on error paths that key off dev->hif2, which is not assigned until after the IRQ setup. If pciallocirqvectors() or the primary devmrequestirq() fails, the reference leaks. Drop it explicitly on those paths via mt7915puthif2().
Affected Software
Event History
Frequently Asked Questions
When can this reference leak occur?
The leak can occur during device probe if pci_alloc_irq_vectors() fails or if the primary devm_request_irq() call fails after mt7915_pci_init_hif2() has obtained the hif2 reference.
Which systems are exposed to this issue?
Systems using the Linux kernel mt76 mt7915 PCI driver are affected when they encounter the specified IRQ setup failures during probing. The provided information does not identify affected kernel versions or configuration defaults.
What change resolves the leak?
The fix explicitly releases the hif2 reference with mt7915_put_hif2() on the affected probe error paths, rather than relying on dev->hif2-based cleanup before dev->hif2 has been assigned.