CVE-2026-68352

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the ath6kl wmi connect event rx() function. The firmware-controlled fields beacon ie len, assoc req len, and assoc resp len are not validated against the buffer length. If the sum of these fields exceeds the actual WMI event data, it can lead to out-of-bounds reads during Information Element (IE) parsing and cause state corruption of the wmi->is wmm enabled variable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.