CVE-2026-68310

Summary

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7915: guard HE capability lookups

mt7915_mcu_bss_he_tlv() and mt7915_mcu_sta_bfer_tlv() both run after checking HE support, then dereference the HE PHY capability returned by mt76_connac_get_he_phy_cap(). That helper can return NULL when no capability entry matches the vif type.

Fetch the capability before appending the TLV and skip the HE-specific setup when no matching capability is available.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxe6d557a78b6016eee7b9cd6832343efd32cc0b27 < 23a2b98e754da04e0e90314d5fa8ca44349590fbaffected
LinuxLinuxe6d557a78b6016eee7b9cd6832343efd32cc0b27 < a031f454f14e3e76ad03bcb23918e1a82b4b0869affected
LinuxLinuxe6d557a78b6016eee7b9cd6832343efd32cc0b27 < 871549814eb4da081f1e93cc0c7ea626a310a966affected
LinuxLinuxe6d557a78b6016eee7b9cd6832343efd32cc0b27 < 6f99a5667c6c7c3e0da1d3c4dc8dfb103042609eaffected
LinuxLinuxe6d557a78b6016eee7b9cd6832343efd32cc0b27 < 8e9db062654a388d0fa587acbeeae68dd33eba41affected
LinuxLinux5.18affected
LinuxLinux0 < 5.18unaffected
LinuxLinux6.6.148 <= 6.6.*unaffected
LinuxLinux6.12.101 <= 6.12.*unaffected
LinuxLinux6.18.42 <= 6.18.*unaffected
LinuxLinux7.1.6 <= 7.1.*unaffected
LinuxLinux7.2-rc5 <= *unaffected

Weaknesses

References