CVE-2026-90348: In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: snoc: use memcpy_fromio() for MSA ram
Summary
A bug in the Linux kernel's ath10k WiFi driver caused crashes when collecting firmware memory dumps on certain Qualcomm chips (WCN3990). The problem occurred because the code used a standard memory copy function (memcpy) on device memory that requires special handling, triggering an alignment fault (a CPU error when accessing misaligned memory addresses) that crashed the kernel and prevented the dump from being captured. The fix uses memcpy_fromio() instead, which is designed to safely copy from device memory with proper alignment handling.
Solution / Mitigation
Use memcpy_fromio() instead of plain memcpy() for copying the MSA (Modem Shared Address) region. An explicit __iomem cast (using __force to satisfy the sparse static checker) is needed when copying the MEMREMAP_WT pointer. This memcpy_fromio() function aligns the source before issuing word-sized reads and uses put_unaligned() for destination writes, making it safe for both device-memory mappings and coherent DMA allocations.
Vulnerability Details
EPSS: 0.0%
September 17, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-90348
First tracked: September 17, 2026 at 02:07 PM
Classified by LLM (prompt v3) · confidence: 95%