CVE-2026-68310: wifi: mt76: mt7915: guard HE capability lookups
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: guard HE capability lookups
mt7915mcubsshetlv() and mt7915mcustabfertlv() both run after checking HE support, then dereference the HE PHY capability returned by mt76connacgethephycap(). That helper can return NULL when no capability entry matches the vif type.
Fetch the capability before appending the TLV and skip the HE-specific setup when no matching capability is available.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68310?
The severity of CVE-2026-68310 is rated at risk level 27.
What does CVE-2026-68310 affect?
CVE-2026-68310 affects the Linux kernel's handling of HE capability lookups in the mt76 and mt7915 drivers.
How do I fix CVE-2026-68310?
To fix CVE-2026-68310, update your Linux kernel to the latest version that includes the patch for this vulnerability.
What are the potential impacts of CVE-2026-68310?
CVE-2026-68310 can potentially lead to dereferencing issues that may compromise system stability and security.
When was CVE-2026-68310 published?
CVE-2026-68310 was published on August 10, 2026.