CVE-2026-68311: wifi: mt76: mt7925: guard link STA in decap offload
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7925: guard link STA in decap offload
mt7925stasetdecapoffload() iterates over the vif validlinks mask when updating decap offload state for an MLO station. The station may not have a link STA for every valid link of the vif, so mt792xstatolink() can return NULL for a link that belongs to the vif but not to the station.
The function currently dereferences mlink before checking whether the link WCID is ready. If mlink is NULL, setting or clearing MTWCIDFLAGHDRTRANS dereferences a NULL pointer.
Skip links without a station link before touching mlink->wcid.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68311?
CVE-2026-68311 has a risk rating of 27.
How do I fix CVE-2026-68311?
To fix CVE-2026-68311, ensure you update to the latest version of the Linux kernel that includes the patch.
What systems are affected by CVE-2026-68311?
CVE-2026-68311 affects systems that utilize the mt76 driver in the Linux kernel for wireless connectivity.
What is the nature of the vulnerability in CVE-2026-68311?
CVE-2026-68311 involves improper handling of MLO station link states during decap offload in the Linux kernel.
When was CVE-2026-68311 published?
CVE-2026-68311 was published on August 10, 2026.