AUGUST 22, 2026
Live Feed
Back to database
Case File

CVE-2026-68355

UNKNOWN · CVSS N/A EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

A buffer underflow vulnerability exists in the ath11k driver of the Linux kernel, triggered when the first entry in msdu_details has a zero buffer address, leading to out-of-bounds access. This flaw could potentially allow an attacker to manipulate memory, resulting in undefined behavior or system crashes. Organizations using affected Linux distributions, particularly those relying on ath11k for Wi-Fi connectivity, should prioritize applying the fix to mitigate risks associated with this vulnerability.

CVE
CVE-2026-68355
Severity
UNKNOWN
CVSS
N/A
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() When the first entry in msdu_details has a zero buffer address, the code accesses msdu_details[i - 1] with i == 0, causing a buffer underflow. Fix similarly to ath12k_wifi7_hal_rx_msdu_list_get() by adding a separate check for i == 0 before the main condition to prevent the out-of-bounds access. Found by Linux Verification Center (linuxtesting.org) with SVACE.