CVE-2026-68439: wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv()
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925mcubsshetlv()
mt76connacgethephycap routine can theoretically return NULL so check cap pointer before dereferencing it.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68439?
The severity of CVE-2026-68439 is rated at 15, indicating a critical risk.
How do I fix CVE-2026-68439?
To fix CVE-2026-68439, ensure you upgrade to the latest patched version of the Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2026-68439?
CVE-2026-68439 affects systems running vulnerable versions of the Linux kernel that utilize the mt76 driver, specifically mt7925.
What does CVE-2026-68439 involve?
CVE-2026-68439 involves a potential NULL-pointer dereference in the mt7925_mcu_bss_he_tlv function of the Linux kernel.
Is CVE-2026-68439 exploited in the wild?
As of the last update, there is no public information indicating that CVE-2026-68439 is actively exploited in the wild.