CVE-2026-68349EPSS p9.3%
CVE-2026-68349CVE-2026-68349
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: carl9170: fix buffer overflow in rx_stream failover path
The failover continuation in carl9170_rx_stream() copies the full tlen
from the second USB transfer instead of capping at rx_failover_missing
bytes. When both transfers are near maximum size, the total exceeds the
65535-byte failover SKB, triggering skb_over_panic.
Limit the copy size to the missing byte count.
[Fix checkpatch CHECK:PARENTHESIS_ALIGNMENT]
Scoring
| EPSS | 0.19% probability of exploitation · percentile 9.3% · 2026-08-11T12:00:17Z |
| Last modified | 2026-08-10 |