Vulnerability in Linux

CVE-2026-68350

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170_tx_process_status() uses `i > ((cmd->hdr.len / 2) + 1)` which is off by tw…

Affected products

  • Linux — versions a84fab3cbfdc427e7d366f1cc844f27b2084c26c, 2.6.37, 0

References