Skip to main content
CVE-2026-98957VulnerabilityPublished Updated

Microsoft · wifi: mt76: mt7915: disable rx napi when removing device

Affects MicrosoftSource GCVE Database

0
Authoritative record:CVE-2026-98957· Medium

Not known to be exploited · fixed in 7199ee4b47de0b61fa6455a1587c5ab645ebe262 : update Microsoft when convenient.

Data as of 28 Oct 2026, 08:45 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

Patch
Available – fixed in 7199ee4b47de0b61fa6455a1587c5ab645ebe262, 916c484d29d82f45c281da2786fcd6a1284430ce, 0281dac1e213329b053fb02e612de7f1477a52d7 +1

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 23 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade Linux to 7199ee4b47de0b61fa6455a1587c5ab645ebe262, 916c484d29d82f45c281da2786fcd6a1284430ce, 0281dac1e213329b053fb02e612de7f1477a52d7 or 0f9afe238eeb79829f0f92f376ba3a20781caccd.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ e57b7901469fc0b021930b83a8094baaf3d81b09, < 7199ee4b47de0b61fa6455a1587c5ab645ebe262
Fixed in
  • 7199ee4b47de0b61fa6455a1587c5ab645ebe262
LinuxLinuxAffected
  • ≥ e57b7901469fc0b021930b83a8094baaf3d81b09, < 916c484d29d82f45c281da2786fcd6a1284430ce
Fixed in
  • 916c484d29d82f45c281da2786fcd6a1284430ce
LinuxLinuxAffected
  • ≥ e57b7901469fc0b021930b83a8094baaf3d81b09, < 0281dac1e213329b053fb02e612de7f1477a52d7
Fixed in
  • 0281dac1e213329b053fb02e612de7f1477a52d7
LinuxLinuxAffected
  • ≥ e57b7901469fc0b021930b83a8094baaf3d81b09, < 0f9afe238eeb79829f0f92f376ba3a20781caccd
Fixed in
  • 0f9afe238eeb79829f0f92f376ba3a20781caccd
LinuxLinuxAffected
  • =5.8
Fixed in–

Description

This vulnerability involves the mt76 wireless driver component, specifically the mt7915 device, where the receive NAPI (New API) is not properly disabled when the device is removed. The issue is identified in Microsoft products with versions 3.0 and 4.0 affected. No CVSS score or detailed impact information is provided.

References

Community reviews

Loading reviews…