CVE-2026-68355

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() When the first entry in msdu_details has a zero buffer address, the code accesses msdu_details[i - 1] with i == 0, causing a buffer underflow. Fix similarly to ath12k_wifi7_hal_rx_msdu_list_get() by adding a separate check for i == 0 before the main condition to prevent the out-of-bounds access. Found by Linux Verification Center (linuxtesting.org) with SVACE.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedAug 10, 2026
First seenAug 10, 2026

How to fix

Update
  • Linux Linux085a5fde5bac29c01059e69399b417e91c0a6c18, 31ea4b175bc3ab430be15834d9ee8a1ce65bee15, 20d18a5ec6ec364fcaf0d03af6fc43dcc42c6591, 69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a, 904367381a922aa2dc3e8bd2488e6c9180516c7a, a154ca3c441a67d36b3a9ea63a4f11b06abe6223, 725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5, 7f11e70629650ff6ea140984e5ce188b775b2683 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxd5c65159f2895379e11ca13f62feabe93278985d ≤ v < 085a5fde5bac29c01059e69399b417e91c0a6c18, d5c65159f2895379e11ca13f62feabe93278985d ≤ v < 31ea4b175bc3ab430be15834d9ee8a1ce65bee15, d5c65159f2895379e11ca13f62feabe93278985d ≤ v < 20d18a5ec6ec364fcaf0d03af6fc43dcc42c6591, d5c65159f2895379e11ca13f62feabe93278985d ≤ v < 69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a, d5c65159f2895379e11ca13f62feabe93278985d ≤ v < 904367381a922aa2dc3e8bd2488e6c9180516c7a, d5c65159f2895379e11ca13f62feabe93278985d ≤ v < a154ca3c441a67d36b3a9ea63a4f11b06abe6223, d5c65159f2895379e11ca13f62feabe93278985d ≤ v < 725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5, d5c65159f2895379e11ca13f62feabe93278985d ≤ v < 7f11e70629650ff6ea140984e5ce188b775b2683, 5.6085a5fde5bac29c01059e69399b417e91c0a6c18, 31ea4b175bc3ab430be15834d9ee8a1ce65bee15, 20d18a5ec6ec364fcaf0d03af6fc43dcc42c6591, 69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a, 904367381a922aa2dc3e8bd2488e6c9180516c7a, a154ca3c441a67d36b3a9ea63a4f11b06abe6223, 725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5, 7f11e70629650ff6ea140984e5ce188b775b2683

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.