CVE-2026-68355: wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix potential buffer underflow in ath11khalrxmsdulistget()
When the first entry in msdudetails has a zero buffer address, the code accesses msdudetails[i - 1] with i == 0, causing a buffer underflow.
Fix similarly to ath12kwifi7halrxmsdulistget() by adding a separate check for i == 0 before the main condition to prevent the out-of-bounds access.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68355?
CVE-2026-68355 has been assigned a risk score of 30, indicating a significant security concern.
What is the nature of the vulnerability in CVE-2026-68355?
CVE-2026-68355 describes a potential buffer underflow in the Linux kernel's ath11k component.
How do I fix CVE-2026-68355?
To fix CVE-2026-68355, ensure that you update to the latest version of the Linux kernel that includes the patched code.
Who is affected by CVE-2026-68355?
CVE-2026-68355 affects systems utilizing the Linux kernel's ath11k wireless driver.
What are the implications of CVE-2026-68355?
The implications of CVE-2026-68355 could include remote code execution or crashes due to the buffer underflow vulnerability.