CVE-2026-68407

Not scored yetLast modified Aug 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: nl80211: free RNR data on MBSSID mismatch

nl80211_parse_beacon() rejects EMA RNR data when there are fewer RNR entries than MBSSID entries.

The rejected RNR allocation has not been attached to the beacon data yet, so free it before returning the error.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 56189d7bc30531def6b999f27940ee43c6ff2569, < 4b76fc30c80b240107a7de3c7560113c9290eafc; >= dbbb27e183b1568d5a907ace1cd144b0709ea52a, < fa9592ef7de11f8c7042315d9bc20e91a97f679e; >= dbbb27e183b1568d5a907ace1cd144b0709ea52a, < 312c8b9d7836ef58e552619a8c19be08b04032bb; >= dbbb27e183b1568d5a907ace1cd144b0709ea52a, < fb052a6e2fa866384d8edc237746583ec94c15af; >= dbbb27e183b1568d5a907ace1cd144b0709ea52a, < 6f919f29e9b75793104709987131b8d910d7800a; >= dbbb27e183b1568d5a907ace1cd144b0709ea52a, < 07a95ec2b54774201fdf4ef7ffb0ca2ab19ed29c; >= 6.1.160, < 6.1.183
LinuxLinux6.4

References

Timeline

Published
Aug 10, 2026
Last modified
Aug 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-68408In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock WheCVE-2026-684098.8In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: defer link RX stats percpu free to RCU sta_remove_linkCVE-2026-68416.1Request Tracker is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the "Page" parameter in GET requests. An attacker CVE-2026-68410In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix memory leak in helper_firmware_cb() helper_firmwarCVE-2026-68411In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: clamp virtio RX length before skb_put hwsim_virtCVE-2026-68412In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan() CVE-2026-68413In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() TheCVE-2026-684147.5In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211_CVE-2026-684157.8In the Linux kernel, the following vulnerability has been resolved: xfrm: clear mode callbacks after failed mode setup xfrm_state_gc_task CVE-2026-68416In the Linux kernel, the following vulnerability has been resolved: mtd: fix double free and WARN_ON in add_mtd_device() error paths When CVE-2026-684177.8In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siw_create_qp() currently caCVE-2026-68418In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent user-triggered null deref on QP create Previously,
CVE-2026-68407: Unscored | Vulnix