CVE-2026-68349
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix buffer overflow in rx_stream failover path The failover continuation in carl9170_rx_stream() copies the full tlen from the second USB transfer instead of capping at rx_failover_missing bytes. When both transfers are near maximum size, the total exceeds the 65535-byte failover SKB, triggering skb_over_panic. Limit the copy size to the missing byte count. [Fix checkpatch CHECK:PARENTHESIS_ALIGNMENT]
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedAug 10, 2026
First seenAug 10, 2026
How to fix
Update
- Linux Linux5fb00a09e9b0375e1ad9d4fefc4a62a67e7ea658, 48c81fb523ecdc6a4b8654944ff32e499f21e6d0, a1ce01764a812c22a47d30aea78e347aebd3eea1, 5acfa18de66b6089b81c1c0bf1a3ae3c940ec39e, b9dfee5e63ee9b5c47be9e344ebc5bd3f43fca78, 4503829843353dbb18b879c35be1cdfc9af677b7, 21f59906ea75618fdd46a7e32754d54fbee083ea, a1a21995c2e1cc2ca6b2226cfe4f5f018370182a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < 5fb00a09e9b0375e1ad9d4fefc4a62a67e7ea658, a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < 48c81fb523ecdc6a4b8654944ff32e499f21e6d0, a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < a1ce01764a812c22a47d30aea78e347aebd3eea1, a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < 5acfa18de66b6089b81c1c0bf1a3ae3c940ec39e, a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < b9dfee5e63ee9b5c47be9e344ebc5bd3f43fca78, a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < 4503829843353dbb18b879c35be1cdfc9af677b7, a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < 21f59906ea75618fdd46a7e32754d54fbee083ea, a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < a1a21995c2e1cc2ca6b2226cfe4f5f018370182a, 2.6.37 | 5fb00a09e9b0375e1ad9d4fefc4a62a67e7ea658, 48c81fb523ecdc6a4b8654944ff32e499f21e6d0, a1ce01764a812c22a47d30aea78e347aebd3eea1, 5acfa18de66b6089b81c1c0bf1a3ae3c940ec39e, b9dfee5e63ee9b5c47be9e344ebc5bd3f43fca78, 4503829843353dbb18b879c35be1cdfc9af677b7, 21f59906ea75618fdd46a7e32754d54fbee083ea, a1a21995c2e1cc2ca6b2226cfe4f5f018370182a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.