CVE-2026-68355EPSS p7.2%
CVE-2026-68355CVE-2026-68355
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
When the first entry in msdu_details has a zero buffer address,
the code accesses msdu_details[i - 1] with i == 0, causing a
buffer underflow.
Fix similarly to ath12k_wifi7_hal_rx_msdu_list_get() by adding
a separate check for i == 0 before the main condition to prevent
the out-of-bounds access.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Scoring
| EPSS | 0.18% probability of exploitation · percentile 7.2% · 2026-08-11T12:00:17Z |
| Last modified | 2026-08-10 |