CVE-2026-68407: wifi: nl80211: free RNR data on MBSSID mismatch
In the Linux kernel, the following vulnerability has been resolved:
wifi: nl80211: free RNR data on MBSSID mismatch
nl80211parsebeacon() rejects EMA RNR data when there are fewer RNR entries than MBSSID entries.
The rejected RNR allocation has not been attached to the beacon data yet, so free it before returning the error.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68407?
CVE-2026-68407 has a risk score of 15, indicating a critical vulnerability.
How do I fix CVE-2026-68407?
To fix CVE-2026-68407, update to the latest version of the Linux kernel where this vulnerability has been patched.
What components are affected by CVE-2026-68407?
CVE-2026-68407 affects the wifi nl80211 subsystem in the Linux kernel.
What is the impact of CVE-2026-68407?
The impact of CVE-2026-68407 includes potential memory management issues due to incorrect handling of RNR data on MBSSID mismatch.
When was CVE-2026-68407 published?
CVE-2026-68407 was published on August 10, 2026.