CVE-2026-68327

Not scored yetLast modified Aug 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wan: wanxl: Only reset hardware after BAR mapping

wanxl_pci_init_one() stores the freshly allocated card in driver data before the PLX BAR is mapped. Several early probe failures then unwind through wanxl_pci_remove_one(), including failure to allocate the coherent status area or to restore the DMA mask.

wanxl_pci_remove_one() unconditionally calls wanxl_reset(), and wanxl_reset() dereferences card->plx. On those early failures card->plx is still NULL, so the error path can dereference a NULL MMIO pointer.

Only issue the hardware reset once the BAR mapping exists. The remaining cleanup in wanxl_pci_remove_one() already checks whether later resources were allocated.

This issue was found by a static analysis checker and confirmed by manual source review.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < ef394eeb9d5ec6db8d979eec6d27f56c2ebc6523; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 3d9617d856ebddcdddbab0ce877c397420f59f55; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 897e289db1e4d00ca6419cfe733c646492147270; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < f4834132773f15ffb255127499c8443947fa7d0f; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < b9e2ff70e96acf83693b27987e0390bad9f83efa; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 59cbe6cfa0fa23c192351cc284e30707309f6741; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 2fe22d58b3797d741570f9873b26653fd511576c; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 91957b89da995607cb654b1f9a3c126ddbaee10f
LinuxLinux2.6.12

References

Timeline

Published
Aug 10, 2026
Last modified
Aug 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-68328In the Linux kernel, the following vulnerability has been resolved: nfp: Check resource mutex allocation nfp_cpp_resource_find() allocatesCVE-2026-683298.8In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Wait for completion instead of returning early in iommu_compCVE-2026-68336.5The a+HRD developed by aEnrich has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands tCVE-2026-683307.8In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix DMA direction for NPU mailbox buffer airoha_npu_send_CVE-2026-68331In the Linux kernel, the following vulnerability has been resolved: dpaa2-eth: put MAC endpoint device on disconnect fsl_mc_get_endpoint()CVE-2026-68332In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix potential use-after-free in airoha_ppe_deinit() airohCVE-2026-68333In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: put MAC endpoint device on disconnect fsl_mc_get_endpoinCVE-2026-68334In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix io_thread race in rxrpc_wake_up_io_thread() rxrpc_wake_up_iCVE-2026-683357.8In the Linux kernel, the following vulnerability has been resolved: rds: drop incoming messages that cross network namespace boundaries rdCVE-2026-68336In the Linux kernel, the following vulnerability has been resolved: bonding: fix devconf_all NULL dereference when IPv6 is disabled When bCVE-2026-68337In the Linux kernel, the following vulnerability has been resolved: bpf: Reject redirect helpers without a bpf_net_context The bpf_redirecCVE-2026-683387.8In the Linux kernel, the following vulnerability has been resolved: net/packet: avoid fanout hook re-registration after unregister packet_
CVE-2026-68327: Unscored | Vulnix