Linux Kernel Security Update Advisory (CVE-2026-90403)
Overview
A resource cleanup error vulnerability has been identified in the rtlwifi PCI wireless LAN driver of the Linux kernel. This vulnerability is attributed to an incomplete resource cleanup issue in the rtlpciprobe() function and is identified as CVE-2026-90403.
Affected Versions
The following Linux kernel versions are affected:
- 2.6.38 Through 5.10.270.
- 5.11 Through 5.15.221.
- 5.16 Through 5.10.270.
- 6.2 Through 6.6.157.
- 6.7 Through 6.12.110.
- 6.13 Through 6.18.52.
- 6.19 Or higher, but less than 7.2.6.
Resolution
CVE-2026-90403 has been fixed via a security update. The vulnerability is reported to be resolved in the following versions or higher:
- 5.10.270 Or higher.
- 5.15.221 Or later.
- 6.1.188 Or later.
- 6.6.157 Or later.
- 6.12.110 Or later.
- 6.18.52 Or later.
- 7.2.6 Or later.
- 7.3-Rc1 and later versions.
Note
This report recommends updating to the latest version and applying the latest Vulnerability Patch version as instructed on the reference site.
