CVE-2026-68349

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow exists in the carl9170 rx stream() function within the wifi carl9170 driver. The issue occurs during the failover continuation process when the system copies the full tlen from the second USB transfer without capping it at the rx failover missing bytes. If both transfers are near maximum size, the total data exceeds the 65535-byte failover SKB (Socket Buffer), which triggers a skb over panic system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.