CVE-2026-68310

CVE-2026-68310

published August 10, 2026

CVSS
—
EPSS
0%
Percentile
6.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7915: guard HE capability lookups

mt7915_mcu_bss_he_tlv() and mt7915_mcu_sta_bfer_tlv() both run after

checking HE support, then dereference the HE PHY capability returned by

mt76_connac_get_he_phy_cap(). That helper can return NULL when no

capability entry matches the vif type.

Fetch the capability before appending the TLV and skip the HE-specific

setup when no matching capability is available.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00173 · 6.4th percentile
Published
2026-08-10T17:20Z
References (6)
EPSS history
Timeline
  • 10 AUG 12:02Z
    wifi: mt76: mt7915: guard HE capability lookups
    cvelistv5