CVE-2026-68406

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: validate PMSR FTM preamble range

PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range.

Reject out-of-range values before using them in the parser capability bit test using the policy.

[drop unnecessary check]

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2, < 73ada9f23c2c7fac74474ea2a38ceb265bae17f1; >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2, < 2b97fa1bce7731f6a244f3d4407c61858f09b93f; >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2, < 9b33f260db3971f572dda0b45dd28d477cf51ed1; >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2, < 44ea65d779e2d23b2264fea6af2d0c666a3ec9fb; >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2, < 922d71fbaf99c1d5318151a0cb0a42ad448d07d9; >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2, < cfbda103aeae61071a122a6fc2bfe98cffbd7165; >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2, < 58320cb47df2accc7a20bb72c0150280732fa58f; >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2, < 36230936468f0ba4930e94aef496fc229d4bb951
LinuxLinux5.0

References

Timeline

Published
Aug 10, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-68407In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: free RNR data on MBSSID mismatch nl80211_parse_beacon()CVE-2026-68408In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock WheCVE-2026-684098.8In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: defer link RX stats percpu free to RCU sta_remove_linkCVE-2026-68416.1Request Tracker is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the "Page" parameter in GET requests. An attacker CVE-2026-68410In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix memory leak in helper_firmware_cb() helper_firmwarCVE-2026-68411In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: clamp virtio RX length before skb_put hwsim_virtCVE-2026-68412In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan() CVE-2026-68413In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() TheCVE-2026-684147.5In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211_CVE-2026-684157.8In the Linux kernel, the following vulnerability has been resolved: xfrm: clear mode callbacks after failed mode setup xfrm_state_gc_task CVE-2026-68416In the Linux kernel, the following vulnerability has been resolved: mtd: fix double free and WARN_ON in add_mtd_device() error paths When CVE-2026-684177.8In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siw_create_qp() currently ca
CVE-2026-68406: Unscored | Vulnix