CVE-2026-68309
Last modified
CVE-2026-68309 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() mt76_connac_get_he_phy_cap routine can theoretically return NULL so check cap pointer before dereferencing it.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() mt76_connac_get_he_phy_cap routine can theoretically return NULL so check cap pointer before dereferencing it.
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8, < d1f8705d6545d20950991785306d08884b0056fc; >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8, < 91eb15c026debd8b7bfbd83f062e6245a4e69964; >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8, < b09508dd7bc4a8948ea00603041a918c09788502; >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8, < 2afc2d5098866518a5c446a2e647b1b3f43daaf4; >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8, < c058786b09cfab080125bc3ee7928a181dcbd37a; >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8, < 8709c66e665a2a09192853d4f3d0fb4bd0f76403; >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8, < 2c1fb2335f5e3afb34f91bc07ecb63517c328090 |
| Linux | Linux | 5.12 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-68309?
How severe is CVE-2026-68309?
How do I fix CVE-2026-68309?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-68303In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68304In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68305In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-68306In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68307In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68308In the Linux kernel, the following vulnerability has been re…
- CVE-2026-6831The Advanced Contact form 7 DB plugin for WordPress is vulne…6.5
- CVE-2026-68310In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68311In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68312In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68313In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68314In the Linux kernel, the following vulnerability has been re…7.8
Are you affected by CVE-2026-68309?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST