CVE-2026-68406

wifi: cfg80211: validate PMSR FTM preamble range

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 19, 2026
Reserved: Jul 30, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: validate PMSR FTM preamble range

PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range.

Reject out-of-range values before using them in the parser capability bit test using the policy.

[drop unnecessary check]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before 73ada9f23c2c7fac74474ea2a38ceb265bae17f1Affected 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before 2b97fa1bce7731f6a244f3d4407c61858f09b93fAffected 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before 9b33f260db3971f572dda0b45dd28d477cf51ed1Affected 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before 44ea65d779e2d23b2264fea6af2d0c666a3ec9fbAffected 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before 922d71fbaf99c1d5318151a0cb0a42ad448d07d9Affected 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before cfbda103aeae61071a122a6fc2bfe98cffbd7165Affected 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before 58320cb47df2accc7a20bb72c0150280732fa58fAffected 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before 36230936468f0ba4930e94aef496fc229d4bb951Affected
LinuxLinux	5.0Affected before 5.0Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before 73ada9f23c2c7fac74474ea2a38ceb265bae17f1Affected
9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before 2b97fa1bce7731f6a244f3d4407c61858f09b93fAffected
9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before 9b33f260db3971f572dda0b45dd28d477cf51ed1Affected
9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before 44ea65d779e2d23b2264fea6af2d0c666a3ec9fbAffected
9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before 922d71fbaf99c1d5318151a0cb0a42ad448d07d9Affected
9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before cfbda103aeae61071a122a6fc2bfe98cffbd7165Affected
9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before 58320cb47df2accc7a20bb72c0150280732fa58fAffected
9bb7e0f24e7e7d00daa1219b14539e2e602649b2 to before 36230936468f0ba4930e94aef496fc229d4bb951Affected

LinuxLinux

5.0Affected
before 5.0Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.