CVE-2026-68309

wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()

N/A

Published: August 10, 2026 at 12:02 PM UTC

Updated: August 19, 2026 at 05:20 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() mt76_connac_get_he_phy_cap routine can theoretically return NULL so check cap pointer before dereferencing it.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.12 ≤ v < 5.15.2165.12 ≤ v < 6.1.1835.12 ≤ v < 6.12.1015.12 ≤ v < 6.18.425.12 ≤ v < 6.6.1485.12 ≤ v < 7.1.65.12 ≤ v < 7.25.12d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8

Vendor states this is fixed in 2afc2d5098866518a5c446a2e647b1b3f43daaf4 (fixed)

Vendor states this is fixed in 2c1fb2335f5e3afb34f91bc07ecb63517c328090 (fixed)

Vendor states this is fixed in 8709c66e665a2a09192853d4f3d0fb4bd0f76403 (fixed)

Vendor states this is fixed in 91eb15c026debd8b7bfbd83f062e6245a4e69964 (fixed)

Vendor states this is fixed in b09508dd7bc4a8948ea00603041a918c09788502 (fixed)

Vendor states this is fixed in c058786b09cfab080125bc3ee7928a181dcbd37a (fixed)

Vendor states this is fixed in d1f8705d6545d20950991785306d08884b0056fc (fixed)

Vendor states this is fixed in 5.12 (unaffected)

Vendor states this is fixed in 5.15.216 (unaffected)

Vendor states this is fixed in 6.1.183 (unaffected)

Vendor states this is fixed in 6.12.101 (unaffected)

Vendor states this is fixed in 6.18.42 (unaffected)