In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7915: guard HE capability lookups

mt7915_mcu_bss_he_tlv() and mt7915_mcu_sta_bfer_tlv() both run after
checking HE support, then dereference the HE PHY capability returned by
mt76_connac_get_he_phy_cap(). That helper can return NULL when no
capability entry matches the vif type.

Fetch the capability before appending the TLV and skip the HE-specific
setup when no matching capability is available.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
e6d557a78b6016eee7b9cd6832343efd32cc0b27 affected < 23a2b98e754da04e0e90314d5fa8ca44349590fb
e6d557a78b6016eee7b9cd6832343efd32cc0b27 affected < a031f454f14e3e76ad03bcb23918e1a82b4b0869
e6d557a78b6016eee7b9cd6832343efd32cc0b27 affected < 871549814eb4da081f1e93cc0c7ea626a310a966
e6d557a78b6016eee7b9cd6832343efd32cc0b27 affected < 6f99a5667c6c7c3e0da1d3c4dc8dfb103042609e
e6d557a78b6016eee7b9cd6832343efd32cc0b27 affected < 8e9db062654a388d0fa587acbeeae68dd33eba41
Linux Linux affected
Version Status Constraints
5.18 affected —
0 unaffected < 5.18
6.6.148 unaffected ≤ 6.6.*
6.12.101 unaffected ≤ 6.12.*
6.18.42 unaffected ≤ 6.18.*
7.1.6 unaffected ≤ 7.1.*
7.2-rc5 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/23a2b98e754da04e0e90314d5fa8ca44349590fb cve-icon
https://git.kernel.org/stable/c/6f99a5667c6c7c3e0da1d3c4dc8dfb103042609e cve-icon
https://git.kernel.org/stable/c/871549814eb4da081f1e93cc0c7ea626a310a966 cve-icon
https://git.kernel.org/stable/c/8e9db062654a388d0fa587acbeeae68dd33eba41 cve-icon
https://git.kernel.org/stable/c/a031f454f14e3e76ad03bcb23918e1a82b4b0869 cve-icon
History

Mon, 10 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: guard HE capability lookups mt7915_mcu_bss_he_tlv() and mt7915_mcu_sta_bfer_tlv() both run after checking HE support, then dereference the HE PHY capability returned by mt76_connac_get_he_phy_cap(). That helper can return NULL when no capability entry matches the vif type. Fetch the capability before appending the TLV and skip the HE-specific setup when no matching capability is available.
Title wifi: mt76: mt7915: guard HE capability lookups
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-10T12:02:44.917Z

Reserved: 2026-07-30T09:28:09.381Z

Link: CVE-2026-68310

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-10T15:15:04Z

Weaknesses