CVE-2026-68349EPSS p13.4%
CVE-2026-68349CVE-2026-68349
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: carl9170: fix buffer overflow in rx_stream failover path
The failover continuation in carl9170_rx_stream() copies the full tlen
from the second USB transfer instead of capping at rx_failover_missing
bytes. When both transfers are near maximum size, the total exceeds the
65535-byte failover SKB, triggering skb_over_panic.
Limit the copy size to the missing byte count.
[Fix checkpatch CHECK:PARENTHESIS_ALIGNMENT]
Scoring
| EPSS | 0.24% probability of exploitation · percentile 13.4% · 2026-10-05T12:00:23Z |
| Last modified | 2026-08-19 |