CVE-2026-68355
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() When the first entry in msdu_details has a zero buffer address, the code accesses msdu_details[i - 1] with i == 0, causing a buffer underflow. Fix similarly to ath12k_wifi7_hal_rx_msdu_list_get() by adding a separate check for i == 0 before the main condition to prevent the out-of-bounds access. Found by Linux Verification Center (linuxtesting.org) with SVACE.
How to fix
- Linux Linux085a5fde5bac29c01059e69399b417e91c0a6c18, 31ea4b175bc3ab430be15834d9ee8a1ce65bee15, 20d18a5ec6ec364fcaf0d03af6fc43dcc42c6591, 69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a, 904367381a922aa2dc3e8bd2488e6c9180516c7a, a154ca3c441a67d36b3a9ea63a4f11b06abe6223, 725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5, 7f11e70629650ff6ea140984e5ce188b775b2683 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | d5c65159f2895379e11ca13f62feabe93278985d ≤ v < 085a5fde5bac29c01059e69399b417e91c0a6c18, d5c65159f2895379e11ca13f62feabe93278985d ≤ v < 31ea4b175bc3ab430be15834d9ee8a1ce65bee15, d5c65159f2895379e11ca13f62feabe93278985d ≤ v < 20d18a5ec6ec364fcaf0d03af6fc43dcc42c6591, d5c65159f2895379e11ca13f62feabe93278985d ≤ v < 69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a, d5c65159f2895379e11ca13f62feabe93278985d ≤ v < 904367381a922aa2dc3e8bd2488e6c9180516c7a, d5c65159f2895379e11ca13f62feabe93278985d ≤ v < a154ca3c441a67d36b3a9ea63a4f11b06abe6223, d5c65159f2895379e11ca13f62feabe93278985d ≤ v < 725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5, d5c65159f2895379e11ca13f62feabe93278985d ≤ v < 7f11e70629650ff6ea140984e5ce188b775b2683, 5.6 | 085a5fde5bac29c01059e69399b417e91c0a6c18, 31ea4b175bc3ab430be15834d9ee8a1ce65bee15, 20d18a5ec6ec364fcaf0d03af6fc43dcc42c6591, 69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a, 904367381a922aa2dc3e8bd2488e6c9180516c7a, a154ca3c441a67d36b3a9ea63a4f11b06abe6223, 725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5, 7f11e70629650ff6ea140984e5ce188b775b2683 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.