Riskcovery

CVE-2026-68407

wifi: nl80211: free RNR data on MBSSID mismatch

State
Published
Severity
Not scored
Published
Aug 10, 2026
Updated
Aug 19, 2026
Reserved
Jul 30, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: nl80211: free RNR data on MBSSID mismatch

nl80211_parse_beacon() rejects EMA RNR data when there are fewer RNR entries than MBSSID entries.

The rejected RNR allocation has not been attached to the beacon data yet, so free it before returning the error.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 56189d7bc30531def6b999f27940ee43c6ff2569 to before 4b76fc30c80b240107a7de3c7560113c9290eafcAffected
  • dbbb27e183b1568d5a907ace1cd144b0709ea52a to before fa9592ef7de11f8c7042315d9bc20e91a97f679eAffected
  • dbbb27e183b1568d5a907ace1cd144b0709ea52a to before 312c8b9d7836ef58e552619a8c19be08b04032bbAffected
  • dbbb27e183b1568d5a907ace1cd144b0709ea52a to before fb052a6e2fa866384d8edc237746583ec94c15afAffected
  • dbbb27e183b1568d5a907ace1cd144b0709ea52a to before 6f919f29e9b75793104709987131b8d910d7800aAffected
  • dbbb27e183b1568d5a907ace1cd144b0709ea52a to before 07a95ec2b54774201fdf4ef7ffb0ca2ab19ed29cAffected
  • 6.1.160 to before 6.1.183Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.1.183 through 6.1.*Not affected
  • 6.6.148 through 6.6.*Not affected
  • 6.12.101 through 6.12.*Not affected
  • 6.18.42 through 6.18.*Not affected
  • 7.1.6 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.