CVE-2026-68349
Received Received - Intake

Buffer Overflow in Linux Kernel WiFi Driver

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix buffer overflow in rx_stream failover path The failover continuation in carl9170_rx_stream() copies the full tlen from the second USB transfer instead of capping at rx_failover_missing bytes. When both transfers are near maximum size, the total exceeds the 65535-byte failover SKB, triggering skb_over_panic. Limit the copy size to the missing byte count. [Fix checkpatch CHECK:PARENTHESIS_ALIGNMENT]

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68349
EUVD
EUVD-2026-55450

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel carl9170 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a buffer overflow vulnerability in the Linux kernel's wifi driver carl9170. It occurs during a failover process where data from a second USB transfer is copied incorrectly. Instead of limiting the copy size to the expected buffer, it copies the full transfer length, which can exceed the allocated space and trigger a kernel panic.

Detection Guidance

This vulnerability is specific to the Linux kernel's carl9170 WiFi driver and may not have direct detection commands. Monitor kernel logs for skb_over_panic errors or unusual WiFi driver crashes. Check for buffer overflow warnings in system logs after WiFi usage.

Impact Analysis

If exploited, this could cause system crashes or instability by triggering a kernel panic. It may also lead to denial of service conditions where the affected system becomes unresponsive. Normal wifi operations could be disrupted during the failover process.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for CVE-2026-68349. If using a vulnerable kernel, avoid using the carl9170 WiFi driver or disable the affected driver module until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68349. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart