Riskcovery

CVE-2026-68412

wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()

State
Published
Severity
Not scored
Published
Aug 10, 2026
Updated
Oct 21, 2026
Reserved
Jul 30, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()

If the test against IEEE80211_MAX_SSID_LEN fails, then 'creq' leaks. Use the existing error handling path to fix it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2a5193119269062608582418deba7af82844159a to before f4114597b7949e90f4fa181342cf01400b8a5a75Affected
  • 2a5193119269062608582418deba7af82844159a to before e67dc2b8d5ac4bb804000b6732768a9ae678912fAffected
  • 2a5193119269062608582418deba7af82844159a to before 99d2e850c643e2c70fa165b722a1ad28347a8b3aAffected
  • 2a5193119269062608582418deba7af82844159a to before c6659f66d4ee4841aafae5659d2ef5e4c5c63cb6Affected
LinuxLinux
  • 2.6.30Affected
  • before 2.6.30Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.42 through 6.18.*Not affected
  • 7.1.6 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.