CVE-2026-68471
Received Received - Intake

Wi-Fi MLE Length Validation Flaw in Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ieee80211: validate MLE common info length ieee80211_mle_common_size() uses the first common-info octet as the common information length for all known MLE types. However, ieee80211_mle_size_ok() only validates that octet for Basic, Probe Request, and TDLS MLEs. Reconfiguration MLEs also skipped the length octet when calculating the minimum common size, and Priority Access MLEs skipped validation of the advertised common information length. Account for the Reconfiguration common-info length octet and validate the advertised common information length for all known MLE types. Keep unknown-type handling unchanged. [remove now misleading comment]

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-68471
EUVD
EUVD-2026-59093

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves insufficient validation of the MLE common information length in wifi components. The function ieee80211_mle_common_size() uses the first common-info octet as a length indicator for all MLE types without proper checks. Some MLE types like Reconfiguration and Priority Access skip validation entirely, potentially allowing malformed or malicious data to be processed.

Detection Guidance

This vulnerability is specific to the Linux kernel's WiFi subsystem and requires kernel-level inspection. Detection involves checking kernel logs for malformed MLE (Mesh Link Establishment) frames or validating the ieee80211 module behavior. Use commands like dmesg | grep ieee80211 or journalctl -k | grep MLE to inspect kernel logs for related errors.

Impact Analysis

This vulnerability could allow attackers to send specially crafted network packets that exploit the lack of validation, potentially leading to system crashes, denial of service, or unauthorized access to sensitive information on affected Linux systems using vulnerable kernel versions.

Mitigation Strategies

Update the Linux kernel to the latest patched version provided by your distribution. If immediate patching is not possible, restrict WiFi network access to trusted devices or disable WiFi mesh functionality temporarily until the update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68471. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart