Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-68407

wifi: nl80211: free RNR data on MBSSID mismatch

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: free RNR data on MBSSID mismatch nl80211_parse_beacon() rejects EMA RNR data when there are fewer RNR entries than MBSSID entries. The rejected RNR allocation has not been attached to the beacon data yet, so free it before returning the error.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 56189d7bc30531def6b999f27940ee43c6ff2569 to < 4b76fc30c80b240107a7de3c7560113c9290eafcaffected
  • dbbb27e183b1568d5a907ace1cd144b0709ea52a to < fa9592ef7de11f8c7042315d9bc20e91a97f679eaffected
  • dbbb27e183b1568d5a907ace1cd144b0709ea52a to < 312c8b9d7836ef58e552619a8c19be08b04032bbaffected
  • dbbb27e183b1568d5a907ace1cd144b0709ea52a to < fb052a6e2fa866384d8edc237746583ec94c15afaffected
  • dbbb27e183b1568d5a907ace1cd144b0709ea52a to < 6f919f29e9b75793104709987131b8d910d7800aaffected
  • dbbb27e183b1568d5a907ace1cd144b0709ea52a to < 07a95ec2b54774201fdf4ef7ffb0ca2ab19ed29caffected
  • 6.1.160 to < 6.1.183affected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.1.183 to ≤ 6.1.*unaffected
  • 6.6.148 to ≤ 6.6.*unaffected
  • 6.12.101 to ≤ 6.12.*unaffected
  • 6.18.42 to ≤ 6.18.*unaffected
  • 7.1.6 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References