CVE-2026-68310

wifi: mt76: mt7915: guard HE capability lookups

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 19, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7915: guard HE capability lookups

mt7915_mcu_bss_he_tlv() and mt7915_mcu_sta_bfer_tlv() both run after checking HE support, then dereference the HE PHY capability returned by mt76_connac_get_he_phy_cap(). That helper can return NULL when no capability entry matches the vif type.

Fetch the capability before appending the TLV and skip the HE-specific setup when no matching capability is available.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e6d557a78b6016eee7b9cd6832343efd32cc0b27 to before 8d5f1f4d2ea2c9d626ccc28dba7ea0df862acc67Affected e6d557a78b6016eee7b9cd6832343efd32cc0b27 to before 23a2b98e754da04e0e90314d5fa8ca44349590fbAffected e6d557a78b6016eee7b9cd6832343efd32cc0b27 to before a031f454f14e3e76ad03bcb23918e1a82b4b0869Affected e6d557a78b6016eee7b9cd6832343efd32cc0b27 to before 871549814eb4da081f1e93cc0c7ea626a310a966Affected e6d557a78b6016eee7b9cd6832343efd32cc0b27 to before 6f99a5667c6c7c3e0da1d3c4dc8dfb103042609eAffected e6d557a78b6016eee7b9cd6832343efd32cc0b27 to before 8e9db062654a388d0fa587acbeeae68dd33eba41Affected
LinuxLinux	5.18Affected before 5.18Not affected 6.1.183 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

e6d557a78b6016eee7b9cd6832343efd32cc0b27 to before 8d5f1f4d2ea2c9d626ccc28dba7ea0df862acc67Affected
e6d557a78b6016eee7b9cd6832343efd32cc0b27 to before 23a2b98e754da04e0e90314d5fa8ca44349590fbAffected
e6d557a78b6016eee7b9cd6832343efd32cc0b27 to before a031f454f14e3e76ad03bcb23918e1a82b4b0869Affected
e6d557a78b6016eee7b9cd6832343efd32cc0b27 to before 871549814eb4da081f1e93cc0c7ea626a310a966Affected
e6d557a78b6016eee7b9cd6832343efd32cc0b27 to before 6f99a5667c6c7c3e0da1d3c4dc8dfb103042609eAffected
e6d557a78b6016eee7b9cd6832343efd32cc0b27 to before 8e9db062654a388d0fa587acbeeae68dd33eba41Affected

LinuxLinux

5.18Affected
before 5.18Not affected
6.1.183 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.