CVE-2026-68402

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the cfg80211 is element inherited() function where the first data octet of a candidate element is read to check an extension non-inheritance list without verifying if the element contains data. A zero-length extension element (WLAN EID EXTENSION with length 0) can cause a one-octet slab-out-of-bounds read. This occurs when ieee802 11 parse elems full() processes elements of a frame within a non-inheritance context, such as during the parsing of a per-STA profile of a Multi-Link element in a (re)association response or a non-transmitted BSS profile. A crafted frame from an access point can trigger this read during element parsing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.