CVE-2026-68309

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()

mt76_connac_get_he_phy_cap routine can theoretically return NULL so check cap pointer before dereferencing it.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8, < d1f8705d6545d20950991785306d08884b0056fc; >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8, < 91eb15c026debd8b7bfbd83f062e6245a4e69964; >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8, < b09508dd7bc4a8948ea00603041a918c09788502; >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8, < 2afc2d5098866518a5c446a2e647b1b3f43daaf4; >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8, < c058786b09cfab080125bc3ee7928a181dcbd37a; >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8, < 8709c66e665a2a09192853d4f3d0fb4bd0f76403; >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8, < 2c1fb2335f5e3afb34f91bc07ecb63517c328090
LinuxLinux5.12

References

Timeline

Published
Aug 10, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-68316.5The Advanced Contact form 7 DB plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 2.0.9. ThisCVE-2026-68310In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: guard HE capability lookups mt7915_mcu_bss_he_tlv(CVE-2026-68311In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: guard link STA in decap offload mt7925_sta_set_decCVE-2026-68312In the Linux kernel, the following vulnerability has been resolved: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain CVE-2026-68313In the Linux kernel, the following vulnerability has been resolved: tipc: fix infinite loop in __tipc_nl_compat_dumpit cmd->dumpit callbacCVE-2026-683147.8In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if driver register fails mcCVE-2026-683157.5In the Linux kernel, the following vulnerability has been resolved: sctp: validate stream count in sctp_process_strreset_inreq() When procCVE-2026-683167.8In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix element size accounting for cmd stream validation TCVE-2026-68317In the Linux kernel, the following vulnerability has been resolved: pds_core: fix auxiliary device add/del races Two paths add or delete tCVE-2026-68318In the Linux kernel, the following vulnerability has been resolved: pds_core: fix use-after-free on workqueue during remove In pdsc_removeCVE-2026-68319In the Linux kernel, the following vulnerability has been resolved: pds_core: fix deadlock between reset thread and remove pci_reset_functCVE-2026-68328.1Hermes WebUI contains an arbitrary file deletion vulnerability in the /api/session/delete endpoint that allows authenticated attackers to de
CVE-2026-68309: Unscored | Vulnix