In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()

When the first entry in msdu_details has a zero buffer address,
the code accesses msdu_details[i - 1] with i == 0, causing a
buffer underflow.

Fix similarly to ath12k_wifi7_hal_rx_msdu_list_get() by adding
a separate check for i == 0 before the main condition to prevent
the out-of-bounds access.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00184.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
d5c65159f2895379e11ca13f62feabe93278985d affected < 085a5fde5bac29c01059e69399b417e91c0a6c18
d5c65159f2895379e11ca13f62feabe93278985d affected < 31ea4b175bc3ab430be15834d9ee8a1ce65bee15
d5c65159f2895379e11ca13f62feabe93278985d affected < 20d18a5ec6ec364fcaf0d03af6fc43dcc42c6591
d5c65159f2895379e11ca13f62feabe93278985d affected < 69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a
d5c65159f2895379e11ca13f62feabe93278985d affected < 904367381a922aa2dc3e8bd2488e6c9180516c7a
d5c65159f2895379e11ca13f62feabe93278985d affected < a154ca3c441a67d36b3a9ea63a4f11b06abe6223
d5c65159f2895379e11ca13f62feabe93278985d affected < 725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5
d5c65159f2895379e11ca13f62feabe93278985d affected < 7f11e70629650ff6ea140984e5ce188b775b2683
Linux Linux affected
Version Status Constraints
5.6 affected —
0 unaffected < 5.6
5.10.265 unaffected ≤ 5.10.*
5.15.216 unaffected ≤ 5.15.*
6.1.183 unaffected ≤ 6.1.*
6.6.148 unaffected ≤ 6.6.*
6.12.101 unaffected ≤ 6.12.*
6.18.42 unaffected ≤ 6.18.*
7.1.6 unaffected ≤ 7.1.*
7.2 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-4745-1 linux-6.12 security update
Debian DLA Debian DLA DLA-4777-1 linux security update
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/085a5fde5bac29c01059e69399b417e91c0a6c18 cve-icon cve-icon
https://git.kernel.org/stable/c/20d18a5ec6ec364fcaf0d03af6fc43dcc42c6591 cve-icon cve-icon
https://git.kernel.org/stable/c/31ea4b175bc3ab430be15834d9ee8a1ce65bee15 cve-icon cve-icon
https://git.kernel.org/stable/c/69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a cve-icon cve-icon
https://git.kernel.org/stable/c/725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5 cve-icon cve-icon
https://git.kernel.org/stable/c/7f11e70629650ff6ea140984e5ce188b775b2683 cve-icon cve-icon
https://git.kernel.org/stable/c/904367381a922aa2dc3e8bd2488e6c9180516c7a cve-icon cve-icon
https://git.kernel.org/stable/c/a154ca3c441a67d36b3a9ea63a4f11b06abe6223 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2026081040-CVE-2026-68355-e340@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-68355 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-68355 cve-icon
History

Wed, 19 Aug 2026 16:45:00 +0000

Type Values Removed Values Added
References

Wed, 12 Aug 2026 11:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-787
CWE-788

Tue, 11 Aug 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-124
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Mon, 10 Aug 2026 17:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-787
CWE-788

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() When the first entry in msdu_details has a zero buffer address, the code accesses msdu_details[i - 1] with i == 0, causing a buffer underflow. Fix similarly to ath12k_wifi7_hal_rx_msdu_list_get() by adding a separate check for i == 0 before the main condition to prevent the out-of-bounds access. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Title wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-19T16:34:03.197Z

Reserved: 2026-07-30T09:28:09.385Z

Link: CVE-2026-68355

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-10T13:20:27.940

Modified: 2026-08-19T17:20:45.190

Link: CVE-2026-68355

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-10T00:00:00Z

Links: CVE-2026-68355 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-13T04:00:09Z

Weaknesses