What’s Vulnerable › Vulnerabilities

CVE-2026-90403: wifi: rtlwifi: pci: fix error path in rtl_pci_probe()

• Severity: high (CVSS 7.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-17 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: pci: fix error path in rtl_pci_probe() In the last error path in rtl_pci_probe(), the cleanup functions are skipped due to a wrong goto label. Moreover, the successful call to rtl_init_rfkill(), ieee80211_register_hw(), rtl_debug_add_one() have to be reverted. Fix this issue by updating the labels and adding the relevant cleanup functions to the last error path.

Affected products

• Linux kernel: 2.6.38 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1b68b6e529ce75112fab98e89583a76370ca394b
• https://git.kernel.org/stable/c/2634998247d24be34ba16a7666f31815ef1da00b
• https://git.kernel.org/stable/c/3c2999d13eeb222ae56631aeb7ca248090f2b210
• https://git.kernel.org/stable/c/86e6187f8525c8f8219eb49e022eba854cc6ab86
• https://git.kernel.org/stable/c/a89818977338ba71194b1ab1d071f0c0848b1e13
• https://git.kernel.org/stable/c/aef178ffae5420afdbf46f7133ed28bd4248e15c
• https://git.kernel.org/stable/c/b42fcfb097da46f0e86564736ced939e83cb8442
• https://git.kernel.org/stable/c/cfd6824dd1d151ab3abc00117b3774c8056006e0

Get alerted when CVE-2026-90403 or the next vulnerability affects your stack