-

CVE-2026-68355

wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()

When the first entry in msdu_details has a zero buffer address,
the code accesses msdu_details[i - 1] with i == 0, causing a
buffer underflow.

Fix similarly to ath12k_wifi7_hal_rx_msdu_list_get() by adding
a separate check for i == 0 before the main condition to prevent
the out-of-bounds access.

Found by Linux Verification Center (linuxtesting.org) with SVACE.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version d5c65159f2895379e11ca13f62feabe93278985d
Version < 085a5fde5bac29c01059e69399b417e91c0a6c18
Status affected
Version d5c65159f2895379e11ca13f62feabe93278985d
Version < 31ea4b175bc3ab430be15834d9ee8a1ce65bee15
Status affected
Version d5c65159f2895379e11ca13f62feabe93278985d
Version < 20d18a5ec6ec364fcaf0d03af6fc43dcc42c6591
Status affected
Version d5c65159f2895379e11ca13f62feabe93278985d
Version < 69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a
Status affected
Version d5c65159f2895379e11ca13f62feabe93278985d
Version < 904367381a922aa2dc3e8bd2488e6c9180516c7a
Status affected
Version d5c65159f2895379e11ca13f62feabe93278985d
Version < a154ca3c441a67d36b3a9ea63a4f11b06abe6223
Status affected
Version d5c65159f2895379e11ca13f62feabe93278985d
Version < 725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5
Status affected
Version d5c65159f2895379e11ca13f62feabe93278985d
Version < 7f11e70629650ff6ea140984e5ce188b775b2683
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.6
Status affected
Version 0
Version < 5.6
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.148
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.083
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a
https://git.kernel.org/stable/c/904367381a922aa2dc3e8bd2488e6c9180516c7a
https://git.kernel.org/stable/c/a154ca3c441a67d36b3a9ea63a4f11b06abe6223
https://git.kernel.org/stable/c/725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5
https://git.kernel.org/stable/c/7f11e70629650ff6ea140984e5ce188b775b2683
https://git.kernel.org/stable/c/085a5fde5bac29c01059e69399b417e91c0a6c18
https://git.kernel.org/stable/c/20d18a5ec6ec364fcaf0d03af6fc43dcc42c6591
https://git.kernel.org/stable/c/31ea4b175bc3ab430be15834d9ee8a1ce65bee15