CVE-2026-68353

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the ath6kl wmi tx complete event rx() function. The issue occurs because the num msg field, which is controlled by the firmware, drives a loop without being validated against the buffer length. If the firmware sends an inflated num msg value, it can lead to reads of up to 1020 bytes beyond the WMI event buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.