CVE-2026-68412
wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.12.114, 6.18.42, 7.1.6
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan() If the test against IEEE80211_MAX_SSID_LEN fails, then 'creq' leaks. Use the existing error handling path to fix it.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 2a5193119269062608582418deba7af82844159a · fixed in f4114597b7949e90f4fa181342cf01400b8a5a75; From 2a5193119269062608582418deba7af82844159a · fixed in e67dc2b8d5ac4bb804000b6732768a9ae678912f; From 2a5193119269062608582418deba7af82844159a · fixed in 99d2e850c643e2c70fa165b722a1ad28347a8b3a; From 2a5193119269062608582418deba7af82844159a · fixed in c6659f66d4ee4841aafae5659d2ef5e4c5c63cb6
- Linux Linux
2.6.30
- KernelLinux
From 2.6.30 · fixed in 6.12.114; From 6.13.0 · fixed in 6.18.42; From 6.19.0 · fixed in 7.1.6