CVE-2026-68412 PUBLISHED

wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()

If the test against IEEE80211_MAX_SSID_LEN fails, then 'creq' leaks. Use the existing error handling path to fix it.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 2a5193119269062608582418deba7af82844159a to e67dc2b8d5ac4bb804000b6732768a9ae678912f (excl.)
  • affected from 2a5193119269062608582418deba7af82844159a to 99d2e850c643e2c70fa165b722a1ad28347a8b3a (excl.)
  • affected from 2a5193119269062608582418deba7af82844159a to c6659f66d4ee4841aafae5659d2ef5e4c5c63cb6 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 2.6.30 is affected
  • unaffected from 0 to 2.6.30 (excl.)
  • unaffected from 6.18.42 to 6.18.* (incl.)
  • unaffected from 7.1.6 to 7.1.* (incl.)
  • unaffected from 7.2-rc4 to * (incl.)

References