8.3
CVE-2026-68352
- EPSS 0.42%
- Veröffentlicht 10.08.2026 12:03:29
- Zuletzt bearbeitet 19.08.2026 17:20:44
- Erkennungen
wifi: ath6kl: fix OOB read from firmware IE lengths in connect event
In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware IE lengths in connect event The firmware-controlled beacon_ie_len, assoc_req_len, and assoc_resp_len fields in ath6kl_wmi_connect_event_rx() are not validated against the buffer length. Their sum (up to 765) can exceed the actual WMI event data, causing out-of-bounds reads during IE parsing and state corruption of wmi->is_wmm_enabled. Add a check that the total IE length fits within the buffer.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
bdcd81707973cf8aa9305337166f8ee842a050d4
Version <
7cae33e3e09a080db96e3a8980c2c8d288318320
Status
affected
Version
bdcd81707973cf8aa9305337166f8ee842a050d4
Version <
1eeed9efc9a40e0635e910c37fee86543041b4e1
Status
affected
Version
bdcd81707973cf8aa9305337166f8ee842a050d4
Version <
a38d7d6376b295245b53bc98b7ca682c027abaf7
Status
affected
Version
bdcd81707973cf8aa9305337166f8ee842a050d4
Version <
1c690f7c4c5b37108ac8c98b94ce1b3c655a4f5e
Status
affected
Version
bdcd81707973cf8aa9305337166f8ee842a050d4
Version <
d70c0a850c21b57a6f46ce363860203389bbeaa6
Status
affected
Version
bdcd81707973cf8aa9305337166f8ee842a050d4
Version <
33b5342d2080657054ddf89ef1199b426a37dae8
Status
affected
Version
bdcd81707973cf8aa9305337166f8ee842a050d4
Version <
94e1bfcefe8264a207c2fda2febb954e70a34b42
Status
affected
Version
bdcd81707973cf8aa9305337166f8ee842a050d4
Version <
6b47b29730de3232b919d8362749f6814c5f2a33
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
3.2
Status
affected
Version
0
Version <
3.2
Status
unaffected
Version <=
5.10.*
Version
5.10.265
Status
unaffected
Version <=
5.15.*
Version
5.15.216
Status
unaffected
Version <=
6.1.*
Version
6.1.183
Status
unaffected
Version <=
6.6.*
Version
6.6.148
Status
unaffected
Version <=
6.12.*
Version
6.12.101
Status
unaffected
Version <=
6.18.*
Version
6.18.42
Status
unaffected
Version <=
7.1.*
Version
7.1.6
Status
unaffected
Version <=
*
Version
7.2
Status
unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.42% | 0.352 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | 8.3 | 2.8 | 5.5 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
|
https://git.kernel.org/stable/c/1c690f7c4c5b37108ac8c98b94ce1b3c655a4f5e
https://git.kernel.org/stable/c/d70c0a850c21b57a6f46ce363860203389bbeaa6
https://git.kernel.org/stable/c/33b5342d2080657054ddf89ef1199b426a37dae8
https://git.kernel.org/stable/c/94e1bfcefe8264a207c2fda2febb954e70a34b42
https://git.kernel.org/stable/c/6b47b29730de3232b919d8362749f6814c5f2a33
https://git.kernel.org/stable/c/1eeed9efc9a40e0635e910c37fee86543041b4e1
https://git.kernel.org/stable/c/7cae33e3e09a080db96e3a8980c2c8d288318320
https://git.kernel.org/stable/c/a38d7d6376b295245b53bc98b7ca682c027abaf7