CVE-2026-98957: Linux kernel · wifi: mt76: mt7915: disable rx napi when removing device
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in 7199ee4b47de0b61fa6455a1587c5ab645ebe262 : update Linux kernel when convenient.
Data as of 26 Oct 2026, 17:30 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 7% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 7199ee4b47de0b61fa6455a1587c5ab645ebe262, 916c484d29d82f45c281da2786fcd6a1284430ce, 0281dac1e213329b053fb02e612de7f1477a52d7 +1
Exploitation evidence
Disclosed: evidence found.
CVE published 23 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to 7199ee4b47de0b61fa6455a1587c5ab645ebe262, 916c484d29d82f45c281da2786fcd6a1284430ce, 0281dac1e213329b053fb02e612de7f1477a52d7 or 0f9afe238eeb79829f0f92f376ba3a20781caccd.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix is available and has been applied in the Linux kernel source code in specific commits. Users should update to a Linux kernel version that includes these fixes to resolve the issue. No additional mitigation is required once the fixed kernel version is deployed.
Description
A vulnerability in the Linux kernel's mt76 wireless driver for the mt7915 device causes system instability when unloading and reloading the mt7915e module. The issue arises because the driver does not disable the receive NAPI (New API) before removing the device, leading to warnings and potential instability. This is particularly problematic for MT7916 devices that require module reloads with different parameters. The flaw has been fixed by properly disabling rx napi within the mt7915e driver during device removal.
References
- git.kernel.org/stable/c/0281dac1e213329b053fb02e612de7f1477a52d7 (opens in a new tab)
- git.kernel.org/stable/c/0f9afe238eeb79829f0f92f376ba3a20781caccd (opens in a new tab)
- git.kernel.org/stable/c/7199ee4b47de0b61fa6455a1587c5ab645ebe262 (opens in a new tab)
- git.kernel.org/stable/c/916c484d29d82f45c281da2786fcd6a1284430ce (opens in a new tab)