CVE-2026-68353
Received Received - Intake

ath6kl WiFi Driver OOB Read Vulnerability

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler The firmware-controlled num_msg field (u8, 0-255) drives the loop in ath6kl_wmi_tx_complete_event_rx() without validation against the buffer length. This allows out-of-bounds reads of up to 1020 bytes past the WMI event buffer when the firmware sends an inflated num_msg. Add a check that the buffer is large enough to hold the fixed struct and the num_msg variable-length entries.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68353
EUVD
EUVD-2026-55454

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in the Linux kernel's ath6kl Wi-Fi driver where the firmware can cause an out-of-bounds read. The issue occurs because the driver does not validate the num_msg field from the firmware, which controls how many entries are read from a buffer. If the firmware sends an inflated num_msg value, it can read up to 1020 extra bytes beyond the intended buffer.

Detection Guidance

This vulnerability involves a flaw in the ath6kl Wi-Fi driver in the Linux kernel where a firmware-controlled field can cause out-of-bounds reads. Detection requires checking if your system uses the affected ath6kl driver and kernel version. Use commands like 'lsmod | grep ath6kl' to check if the module is loaded and 'uname -a' to verify your kernel version. If the module is loaded and your kernel is vulnerable, monitor for unusual network activity or crashes.

Impact Analysis

This vulnerability could allow an attacker with access to the system to read sensitive kernel memory, potentially exposing passwords, encryption keys, or other confidential data. It may also lead to system crashes or instability if exploited maliciously.

Mitigation Strategies

Immediately update your Linux kernel to a patched version that includes the fix for this vulnerability. If updating is not immediately possible, consider disabling the ath6kl driver by unloading the module with 'sudo rmmod ath6kl' if it is not required for your system. Ensure your system is configured to receive security updates automatically.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68353. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart