CVE-2026-68407
Received Received - Intake

Memory Leak in Linux Kernel WiFi Subsystem

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: free RNR data on MBSSID mismatch nl80211_parse_beacon() rejects EMA RNR data when there are fewer RNR entries than MBSSID entries. The rejected RNR allocation has not been attached to the beacon data yet, so free it before returning the error.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68407
EUVD
EUVD-2026-55593

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in the Linux kernel related to Wi-Fi functionality. It occurs when processing beacon data in the nl80211 subsystem. The issue arises when the system rejects RNR data due to a mismatch between RNR entries and MBSSID entries, but fails to properly free the rejected RNR allocation before returning an error.

Detection Guidance

This vulnerability is specific to the Linux kernel's wifi subsystem and may not have direct detection commands. Monitor kernel logs for errors related to nl80211 or MBSSID processing. Check for crashes or warnings in wireless driver logs.

Impact Analysis

This vulnerability could potentially cause memory leaks in the Linux kernel when processing Wi-Fi beacon data. While it may not directly impact end users, it could lead to system instability or resource exhaustion over time if exploited repeatedly.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this issue. If using a custom or vendor kernel, contact your vendor for a patched release. Reboot the system after applying the update.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68407. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart