CVE-2026-68407

CVE-2026-68407

published August 10, 2026

CVSS
—
EPSS
0%
Percentile
6.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: nl80211: free RNR data on MBSSID mismatch

nl80211_parse_beacon() rejects EMA RNR data when there are fewer RNR

entries than MBSSID entries.

The rejected RNR allocation has not been attached to the beacon data yet,

so free it before returning the error.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.3th percentile
Published
2026-08-10T17:20Z
References (6)
https://git.kernel.org/stable/c/07a95ec2b54774201fdf4ef7ffb0ca2ab19ed29c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/312c8b9d7836ef58e552619a8c19be08b04032bb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4b76fc30c80b240107a7de3c7560113c9290eafc · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6f919f29e9b75793104709987131b8d910d7800a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/fa9592ef7de11f8c7042315d9bc20e91a97f679e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/fb052a6e2fa866384d8edc237746583ec94c15af · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 10 AUG 12:04Z
    wifi: nl80211: free RNR data on MBSSID mismatch
    cvelistv5