CVE-2026-68412
Received Received - Intake

Heap Buffer Overflow in Linux Kernel WiFi Configuration

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan() If the test against IEEE80211_MAX_SSID_LEN fails, then 'creq' leaks. Use the existing error handling path to fix it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68412
EUVD
EUVD-2026-55598

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves an error handling path in the cfg80211_wext_siwscan function. When a test against IEEE80211_MAX_SSID_LEN fails, memory allocated for 'creq' is not properly released, leading to a memory leak.

Detection Guidance

This vulnerability is specific to the Linux kernel's wifi configuration and may not have direct detection commands. Monitor kernel logs for errors related to cfg80211 or wireless interface scanning failures. Check for memory leaks in wireless drivers using tools like 'valgrind' or 'kmemleak'.

Impact Analysis

This vulnerability could lead to resource exhaustion on affected systems due to memory leaks. This might cause performance degradation, system instability, or unexpected crashes in systems running vulnerable versions of the Linux kernel.

Mitigation Strategies

Update your Linux kernel to the latest stable version to ensure the fix is applied. If updating is not immediately possible, restrict access to wireless interfaces and monitor for unusual activity in kernel logs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68412. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart