CVE-2026-68197

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL dereference issue exists in the mwifiex wireless driver. The function mwifiex tdls add ht oper() checks for the presence of bss desc->bcn ht cap but subsequently dereferences bss desc->bcn ht oper without a proper check. Because these two pointers are populated independently during the parsing of the Access Point (AP) beacon in mwifiex update bss desc with ie(), an AP that provides an HT Capabilities element but lacks an HT Operation element will result in bcn ht oper being NULL. Attempting to establish a TDLS (Direct Link Setup) link to a peer while associated with such an AP triggers the NULL dereference, leading to a kernel crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.