In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()

When the first entry in msdu_details has a zero buffer address,
the code accesses msdu_details[i - 1] with i == 0, causing a
buffer underflow.

Fix similarly to ath12k_wifi7_hal_rx_msdu_list_get() by adding
a separate check for i == 0 before the main condition to prevent
the out-of-bounds access.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
d5c65159f2895379e11ca13f62feabe93278985d affected < 69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a
d5c65159f2895379e11ca13f62feabe93278985d affected < 904367381a922aa2dc3e8bd2488e6c9180516c7a
d5c65159f2895379e11ca13f62feabe93278985d affected < a154ca3c441a67d36b3a9ea63a4f11b06abe6223
d5c65159f2895379e11ca13f62feabe93278985d affected < 725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5
d5c65159f2895379e11ca13f62feabe93278985d affected < 7f11e70629650ff6ea140984e5ce188b775b2683
Linux Linux affected
Version Status Constraints
5.6 affected —
0 unaffected < 5.6
6.6.148 unaffected ≤ 6.6.*
6.12.101 unaffected ≤ 6.12.*
6.18.42 unaffected ≤ 6.18.*
7.1.6 unaffected ≤ 7.1.*
7.2-rc5 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a cve-icon
https://git.kernel.org/stable/c/725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5 cve-icon
https://git.kernel.org/stable/c/7f11e70629650ff6ea140984e5ce188b775b2683 cve-icon
https://git.kernel.org/stable/c/904367381a922aa2dc3e8bd2488e6c9180516c7a cve-icon
https://git.kernel.org/stable/c/a154ca3c441a67d36b3a9ea63a4f11b06abe6223 cve-icon
History

Mon, 10 Aug 2026 17:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-787
CWE-788

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() When the first entry in msdu_details has a zero buffer address, the code accesses msdu_details[i - 1] with i == 0, causing a buffer underflow. Fix similarly to ath12k_wifi7_hal_rx_msdu_list_get() by adding a separate check for i == 0 before the main condition to prevent the out-of-bounds access. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Title wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-10T12:03:32.321Z

Reserved: 2026-07-30T09:28:09.385Z

Link: CVE-2026-68355

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-10T16:45:03Z

Weaknesses