Strix
26.1K

CVE-2026-68310

Unknown

Last modified

CVE-2026-68310 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: guard HE capability lookups mt7915_mcu_bss_he_tlv() and mt7915_mcu_sta_bfer_tlv() both run after checking HE support, then dereference the HE PHY capability returned by mt76_connac_get_he_phy_cap(). That helper can return NULL when no capability entry matches the vif type. Fetch the capability before appending the TLV and skip the HE-specific setup when no matching capability is available..

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: guard HE capability lookups mt7915_mcu_bss_he_tlv() and mt7915_mcu_sta_bfer_tlv() both run after checking HE support, then dereference the HE PHY capability returned by mt76_connac_get_he_phy_cap(). That helper can return NULL when no capability entry matches the vif type. Fetch the capability before appending the TLV and skip the HE-specific setup when no matching capability is available.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= e6d557a78b6016eee7b9cd6832343efd32cc0b27, < 23a2b98e754da04e0e90314d5fa8ca44349590fb; >= e6d557a78b6016eee7b9cd6832343efd32cc0b27, < a031f454f14e3e76ad03bcb23918e1a82b4b0869; >= e6d557a78b6016eee7b9cd6832343efd32cc0b27, < 871549814eb4da081f1e93cc0c7ea626a310a966; >= e6d557a78b6016eee7b9cd6832343efd32cc0b27, < 6f99a5667c6c7c3e0da1d3c4dc8dfb103042609e; >= e6d557a78b6016eee7b9cd6832343efd32cc0b27, < 8e9db062654a388d0fa587acbeeae68dd33eba41
LinuxLinux5.18

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-68310?
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: guard HE capability lookups mt7915_mcu_bss_he_tlv() and mt7915_mcu_sta_bfer_tlv() both run after checking HE support, then dereference the HE PHY capability returned by mt76_connac_get_he_phy_cap(). That helper can return NULL when no capability entry matches the vif type. Fetch the capability before appending the TLV and skip the HE-specific setup when no matching capability is available.
How severe is CVE-2026-68310?
Severity scoring for CVE-2026-68310 is pending analysis.
How do I fix CVE-2026-68310?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-68310?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST