CVE-2026-68350
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170_tx_process_status() uses `i > ((cmd->hdr.len / 2) + 1)` which is off by two, allowing 2 extra iterations past valid _tx_status entries when the firmware- controlled hdr.ext exceeds hdr.len/2. Fix by using the correct comparison `i >= (cmd->hdr.len / 2)`.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedAug 10, 2026
First seenAug 10, 2026
How to fix
Update
- Linux Linux9bf8d8510b7bed20320dead0f8cdcf8e610ec8db, 2c030c20f112bd8f6aa59d09501835605f01bf9d, 73462e8e602047a03e538d971a79ad67a4ba9a5d, 7ed0dce8613c92111d2a3836ced2ab03190ba20e, e8a862a3da457ddc50633c346dc645d559da09ae, fab6ff91d5b8c4af62e2ced42fb357fa3eb9fd59, 423c836f934814b8fdbe53b24a79d021a0ee8454, a3f42f1049ad80c65560d2b078ad426c3134f78d or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < 9bf8d8510b7bed20320dead0f8cdcf8e610ec8db, a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < 2c030c20f112bd8f6aa59d09501835605f01bf9d, a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < 73462e8e602047a03e538d971a79ad67a4ba9a5d, a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < 7ed0dce8613c92111d2a3836ced2ab03190ba20e, a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < e8a862a3da457ddc50633c346dc645d559da09ae, a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < fab6ff91d5b8c4af62e2ced42fb357fa3eb9fd59, a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < 423c836f934814b8fdbe53b24a79d021a0ee8454, a84fab3cbfdc427e7d366f1cc844f27b2084c26c ≤ v < a3f42f1049ad80c65560d2b078ad426c3134f78d, 2.6.37 | 9bf8d8510b7bed20320dead0f8cdcf8e610ec8db, 2c030c20f112bd8f6aa59d09501835605f01bf9d, 73462e8e602047a03e538d971a79ad67a4ba9a5d, 7ed0dce8613c92111d2a3836ced2ab03190ba20e, e8a862a3da457ddc50633c346dc645d559da09ae, fab6ff91d5b8c4af62e2ced42fb357fa3eb9fd59, 423c836f934814b8fdbe53b24a79d021a0ee8454, a3f42f1049ad80c65560d2b078ad426c3134f78d |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.