CVE-2026-68306 PUBLISHED

wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()

mt76_connac_get_eht_phy_cap routine can theoretically return NULL so check cap pointer before dereferencing it.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from ba01944adee9f4a71cf2879b9529057fd8de1972 to 2b1882cf313ae44181146629b3578a7826c672c9 (excl.)
  • affected from ba01944adee9f4a71cf2879b9529057fd8de1972 to 3e4f848f4a620e1d77c38459e73cf3b362f7bc6b (excl.)
  • affected from ba01944adee9f4a71cf2879b9529057fd8de1972 to d5628f39fccc107dca00b98a491d9848898599f7 (excl.)
  • affected from ba01944adee9f4a71cf2879b9529057fd8de1972 to 45c496756c6f6df6c3aeb5b2cb996993d2f14687 (excl.)
  • affected from ba01944adee9f4a71cf2879b9529057fd8de1972 to 2fffc472bec490c8357defcee9c075ca74467352 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.3 is affected
  • unaffected from 0 to 6.3 (excl.)
  • unaffected from 6.6.148 to 6.6.* (incl.)
  • unaffected from 6.12.101 to 6.12.* (incl.)
  • unaffected from 6.18.42 to 6.18.* (incl.)
  • unaffected from 7.1.6 to 7.1.* (incl.)
  • unaffected from 7.2-rc5 to * (incl.)

References