CVE-2026-68306: wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996mcustabfereht()
mt76connacgetehtphycap routine can theoretically return NULL so check cap pointer before dereferencing it.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68306?
CVE-2026-68306 has a risk score of 12, indicating high severity.
What is the nature of CVE-2026-68306?
CVE-2026-68306 is a vulnerability in the Linux kernel related to a potential NULL-pointer dereference in the mt7996_mcu_sta_bfer_eht() function.
How do I fix CVE-2026-68306?
To fix CVE-2026-68306, apply the relevant patches from the Linux kernel that address the NULL-pointer dereference issue.
Which Linux kernel versions are affected by CVE-2026-68306?
Specific Linux kernel versions before the patch for CVE-2026-68306 may be affected, so users should check their current version against the patched release.
What is the impact of CVE-2026-68306?
If exploited, CVE-2026-68306 could lead to a system crash or unexpected behavior due to the NULL-pointer dereference.