CVE-2026-68406: wifi: cfg80211: validate PMSR FTM preamble range
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: validate PMSR FTM preamble range
PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range.
Reject out-of-range values before using them in the parser capability bit test using the policy.
[drop unnecessary check]
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68406?
The severity of CVE-2026-68406 is rated at 15.
How do I fix CVE-2026-68406?
To fix CVE-2026-68406, you should update to the latest version of the Linux kernel that contains the patch for this vulnerability.
Who is affected by CVE-2026-68406?
CVE-2026-68406 affects users and systems running vulnerable versions of the Linux kernel that improperly validate PMSR FTM preamble values.
What systems are at risk from CVE-2026-68406?
Any system utilizing an affected version of the Linux kernel and using wifi capabilities is at risk from CVE-2026-68406.
What is the main issue caused by CVE-2026-68406?
CVE-2026-68406 allows for improper validation of PMSR FTM preamble values which can lead to inconsistency in request handling.