CVE-2026-68349: wifi: carl9170: fix buffer overflow in rx_stream failover path
In the Linux kernel, the following vulnerability has been resolved:
wifi: carl9170: fix buffer overflow in rxstream failover path
The failover continuation in carl9170rxstream() copies the full tlen from the second USB transfer instead of capping at rxfailovermissing bytes. When both transfers are near maximum size, the total exceeds the 65535-byte failover SKB, triggering skboverpanic.
Limit the copy size to the missing byte count.
[Fix checkpatch CHECK:PARENTHESISALIGNMENT]
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68349?
CVE-2026-68349 is classified as a high-severity vulnerability due to its potential to cause a buffer overflow.
How do I fix CVE-2026-68349?
To fix CVE-2026-68349, ensure you apply the latest updates or patches provided by your Linux distribution that address this specific vulnerability.
What type of vulnerability is CVE-2026-68349?
CVE-2026-68349 is a buffer overflow vulnerability affecting the carl9170 driver in the Linux kernel.
What systems are affected by CVE-2026-68349?
CVE-2026-68349 affects systems running the Linux kernel with the carl9170 wireless driver.
What impact can CVE-2026-68349 have on my system?
CVE-2026-68349 can lead to potential system crashes, memory corruption, or arbitrary code execution.