CVE-2026-68470
Received Received - Intake

Memory Corruption in Linux Kernel WiFi Subsystem

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate extension-frame layout before RX Extension frames only have the extension header at the regular 802.11 header offset. The generic RX path can still reach helpers and interface dispatch code that read regular header address fields before unsupported extension subtypes are dropped. mac80211 currently only handles S1G beacon extension frames. Drop other extension subtypes before they can reach regular-header RX processing. For S1G beacons, linearize the SKB with the management-frame path and require the fixed S1G beacon header, including optional fixed fields indicated by frame control, before generic RX dispatch. Route S1G beacons through the station/default-link RX path without regular-header station lookup. Avoid regular-header address reads in the mac80211 RX paths that process S1G extension beacons, including accept-frame, duplicate-detection, address-copy, and MLO address-translation paths. Also make ieee80211_get_bssid() length-safe before returning the S1G source-address pointer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-68470
EUVD
EUVD-2026-59092

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper handling of extension frames in the mac80211 subsystem. Attackers could exploit this to cause incorrect processing of Wi-Fi frames, potentially leading to memory corruption or other security issues.

Detection Guidance

This vulnerability affects the Linux kernel's mac80211 subsystem, specifically related to WiFi extension frame handling. Detection requires checking kernel logs for related errors or monitoring for unusual WiFi frame processing. Commands like 'dmesg | grep mac80211' or 'journalctl -k | grep -i wifi' may help identify issues.

Impact Analysis

If exploited, this flaw could allow attackers to trigger memory corruption or crash the system by sending malformed Wi-Fi frames. This may lead to denial-of-service conditions or unauthorized code execution on affected Linux systems.

Mitigation Strategies

Update your Linux kernel to the latest patched version. If using a distribution kernel, apply vendor-provided updates. For custom kernels, apply the upstream patch addressing the mac80211 extension frame validation issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68470. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart