Get real-time updates on Telegram
CVE-2026-90408: Linux 6.3
CVE-2026-90408. CVSS 3.1 base score 7.7 (HIGH, Source advisory). EPSS 0.00175 (percentile 0.0651), scored 14-Oct-2026.
Affected technology
Linux · d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before 23bed4ef132c55c9016f0c6122c8b8ba2efa2353, d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before bf97c9d5123859a07848462539153176db029f3a, d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before 878654eb78c6aa0ff585baf1376567c775ca28ec
Linux
Linux · 6.3
Linux
Component: Not specified by the source
File: drivers/net/wireless/ath/ath12k/wmi.c
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.7/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 30.8 /100 (P4)
- CVSS 3.1
- 7.7 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · Source advisory
- EPSS
- 0.00175 · percentile 0.0651 · 2026-10-14
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-15 12:39:55.759815+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 11:57:11.427822+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-90408.html