CVE-2026-68406 PUBLISHED

wifi: cfg80211: validate PMSR FTM preamble range

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: validate PMSR FTM preamble range

PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range.

Reject out-of-range values before using them in the parser capability bit test using the policy.

[drop unnecessary check]

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to 44ea65d779e2d23b2264fea6af2d0c666a3ec9fb (excl.)
  • affected from 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to 922d71fbaf99c1d5318151a0cb0a42ad448d07d9 (excl.)
  • affected from 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to cfbda103aeae61071a122a6fc2bfe98cffbd7165 (excl.)
  • affected from 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to 58320cb47df2accc7a20bb72c0150280732fa58f (excl.)
  • affected from 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to 36230936468f0ba4930e94aef496fc229d4bb951 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.0 is affected
  • unaffected from 0 to 5.0 (excl.)
  • unaffected from 6.6.148 to 6.6.* (incl.)
  • unaffected from 6.12.101 to 6.12.* (incl.)
  • unaffected from 6.18.42 to 6.18.* (incl.)
  • unaffected from 7.1.6 to 7.1.* (incl.)
  • unaffected from 7.2-rc4 to * (incl.)

References