CVE-2026-68309 PUBLISHED

wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()

mt76_connac_get_he_phy_cap routine can theoretically return NULL so check cap pointer before dereferencing it.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 to b09508dd7bc4a8948ea00603041a918c09788502 (excl.)
  • affected from d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 to 2afc2d5098866518a5c446a2e647b1b3f43daaf4 (excl.)
  • affected from d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 to c058786b09cfab080125bc3ee7928a181dcbd37a (excl.)
  • affected from d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 to 8709c66e665a2a09192853d4f3d0fb4bd0f76403 (excl.)
  • affected from d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 to 2c1fb2335f5e3afb34f91bc07ecb63517c328090 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.12 is affected
  • unaffected from 0 to 5.12 (excl.)
  • unaffected from 6.6.148 to 6.6.* (incl.)
  • unaffected from 6.12.101 to 6.12.* (incl.)
  • unaffected from 6.18.42 to 6.18.* (incl.)
  • unaffected from 7.1.6 to 7.1.* (incl.)
  • unaffected from 7.2-rc5 to * (incl.)

References