CVE-2026-90403wifi: rtlwifi: pci: fix error path in rtl_pci_probe()
- 7.0HighCVSS base score
- 0.15%Exploitation in 30 daysEPSS · top 96% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: pci: fix error path in rtl_pci_probe() In the last error path in rtl_pci_probe(), the cleanup functions are skipped due to a wrong goto label. Moreover, the successful call to rtl_init_rfkill(), ieee80211_register_hw(), rtl_debug_add_one() have to be reverted. Fix this issue by updating the labels and adding the relevant cleanup functions to the last error path.
Timeline
ID reserved
By Linux
- 6 days later
· 6 days later
Published
- 32 days later
· 32 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Received | 3.1 | High7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.15% · top 96% of all CVEs (13 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.0.
Affected products
- affected 0c8173385e549f95cd80c3fff5aab87b4f881d8d – < 2634998247d24be34ba16a7666f31815ef1da00b
- affected 0c8173385e549f95cd80c3fff5aab87b4f881d8d – < cfd6824dd1d151ab3abc00117b3774c8056006e0
- affected 0c8173385e549f95cd80c3fff5aab87b4f881d8d – < 86e6187f8525c8f8219eb49e022eba854cc6ab86
- affected 0c8173385e549f95cd80c3fff5aab87b4f881d8d – < aef178ffae5420afdbf46f7133ed28bd4248e15c
- affected 0c8173385e549f95cd80c3fff5aab87b4f881d8d – < b42fcfb097da46f0e86564736ced939e83cb8442
- affected 0c8173385e549f95cd80c3fff5aab87b4f881d8d – < a89818977338ba71194b1ab1d071f0c0848b1e13
- affected 0c8173385e549f95cd80c3fff5aab87b4f881d8d – < 1b68b6e529ce75112fab98e89583a76370ca394b
- affected 0c8173385e549f95cd80c3fff5aab87b4f881d8d – < 3c2999d13eeb222ae56631aeb7ca248090f2b210
- affected 2.6.38
- unaffected < 2.6.38
- unaffected 5.10.270 – ≤ 5.10.*
- unaffected 5.15.221 – ≤ 5.15.*
- unaffected 6.1.188 – ≤ 6.1.*
- unaffected 6.6.157 – ≤ 6.6.*
- unaffected 6.12.110 – ≤ 6.12.*
- unaffected 6.18.52 – ≤ 6.18.*
- unaffected 7.2.6 – ≤ 7.2.*
- unaffected 7.3 – ≤ *
References
References8
- https://git.kernel.org/stable/c/2634998247d24be34ba16a7666f31815ef1da00b (opens in a new tab)
- https://git.kernel.org/stable/c/cfd6824dd1d151ab3abc00117b3774c8056006e0 (opens in a new tab)
- https://git.kernel.org/stable/c/86e6187f8525c8f8219eb49e022eba854cc6ab86 (opens in a new tab)
- https://git.kernel.org/stable/c/aef178ffae5420afdbf46f7133ed28bd4248e15c (opens in a new tab)
- https://git.kernel.org/stable/c/b42fcfb097da46f0e86564736ced939e83cb8442 (opens in a new tab)
- https://git.kernel.org/stable/c/a89818977338ba71194b1ab1d071f0c0848b1e13 (opens in a new tab)
- https://git.kernel.org/stable/c/1b68b6e529ce75112fab98e89583a76370ca394b (opens in a new tab)
- https://git.kernel.org/stable/c/3c2999d13eeb222ae56631aeb7ca248090f2b210 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-82064 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-90403)Record last updated .