CVE-2026-68406
Last modified
CVE-2026-68406 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate PMSR FTM preamble range PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range. Reject out-of-range values before using them in the parser capability bit test using the policy. [drop unnecessary check].
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate PMSR FTM preamble range PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range. Reject out-of-range values before using them in the parser capability bit test using the policy. [drop unnecessary check]
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2, < 44ea65d779e2d23b2264fea6af2d0c666a3ec9fb; >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2, < 922d71fbaf99c1d5318151a0cb0a42ad448d07d9; >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2, < cfbda103aeae61071a122a6fc2bfe98cffbd7165; >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2, < 58320cb47df2accc7a20bb72c0150280732fa58f; >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2, < 36230936468f0ba4930e94aef496fc229d4bb951 |
| Linux | Linux | 5.0 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-68406?
How severe is CVE-2026-68406?
How do I fix CVE-2026-68406?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-68400In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68401In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68402In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68403In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68404In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68405In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68407In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68408In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68409In the Linux kernel, the following vulnerability has been re…
- CVE-2026-6841Request Tracker is vulnerable to a reflected cross-site scri…6.1
- CVE-2026-68410In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68411In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-68406?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST