CVE-2026-68311

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mt7925 sta set decap offload() function when updating the decap offload state for a Multi-Link Operation (MLO) station. The function iterates over the virtual interface (vif) valid links mask, but since a station may not have a link for every valid link of the vif, the mt792x sta to link() function can return NULL. The system dereferences the mlink variable before verifying if the link Wireless Client Identifier (WCID) is ready. If mlink is NULL, attempting to set or clear the MT WCID FLAG HDR TRANS flag results in a NULL pointer dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.