CVE-2026-90403 (CVSS 7)

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: pci: fix error path in rtl_pci_probe() In the last error path in rtl_pci_probe(), the cleanup functions are skipped due to a wrong goto label. Moreover, the successful call to rtl_init_rfkill(), ieee80211_register_hw(), rtl_debug_add_one() have to be reverted. Fix this issue by updating the labels and adding the relevant cleanup functions to the last error path.

Is your site exposed to CVE-2026-90403?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.0

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0015

Probability of exploitation

0.03%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/1b68b6e529ce75112fab98e89583a76370ca394b https://git.kernel.org/stable/c/2634998247d24be34ba16a7666f31815ef1da00b https://git.kernel.org/stable/c/3c2999d13eeb222ae56631aeb7ca248090f2b210 https://git.kernel.org/stable/c/86e6187f8525c8f8219eb49e022eba854cc6ab86 https://git.kernel.org/stable/c/a89818977338ba71194b1ab1d071f0c0848b1e13 https://git.kernel.org/stable/c/aef178ffae5420afdbf46f7133ed28bd4248e15c https://git.kernel.org/stable/c/b42fcfb097da46f0e86564736ced939e83cb8442 https://git.kernel.org/stable/c/cfd6824dd1d151ab3abc00117b3774c8056006e0

Frequently Asked Questions

What is CVE-2026-90403? +

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: pci: fix error path in rtl_pci_probe() In the last error path in rtl_pci_probe(), the cleanup functions are skipped due to a wrong goto label. Moreover, the successful call to rtl_init_rfkill(), ieee80211_register_hw(), rtl_debug_add_one() have to be reverted. Fix this issue by updating the labels and adding the relevant cleanup functions to the last error path. It has a CVSS v3.1 base score of 7.0 (HIGH).

How severe is CVE-2026-90403? +

CVE-2026-90403 has a CVSS v3.1 score of 7.0 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0015, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-90403? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-90403