CVE-2026-68471

In the Linux kernel, the following vulnerability has been resolved:

wifi: ieee80211: validate MLE common info length

ieee80211_mle_common_size() uses the first common-info octet as the

common information length for all known MLE types. However,

ieee80211_mle_size_ok() only validates that octet for Basic, Probe

Request, and TDLS MLEs.

Reconfiguration MLEs also skipped the length octet when calculating the

minimum common size, and Priority Access MLEs skipped validation of the

advertised common information length.

Account for the Reconfiguration common-info length octet and validate

the advertised common information length for all known MLE types. Keep

unknown-type handling unchanged.

[remove now misleading comment]