{"id":"CVE-2026-68309","title":"wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()\n\nmt76_connac_get_he_phy_cap routine can theoretically return NULL so\ncheck cap p…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 < d1f8705d6545d20950991785306d08884b0056fc","Linux >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 < 91eb15c026debd8b7bfbd83f062e6245a4e69964","Linux >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 < b09508dd7bc4a8948ea00603041a918c09788502","Linux >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 < 2afc2d5098866518a5c446a2e647b1b3f43daaf4","Linux >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 < c058786b09cfab080125bc3ee7928a181dcbd37a","Linux >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 < 8709c66e665a2a09192853d4f3d0fb4bd0f76403","Linux >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 < 2c1fb2335f5e3afb34f91bc07ecb63517c328090","Linux 5.12"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:46:57.510714Z"},"published":"2026-08-10","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:55:12.704Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-68309","references":[{"url":"https://git.kernel.org/stable/c/d1f8705d6545d20950991785306d08884b0056fc"},{"url":"https://git.kernel.org/stable/c/91eb15c026debd8b7bfbd83f062e6245a4e69964"},{"url":"https://git.kernel.org/stable/c/b09508dd7bc4a8948ea00603041a918c09788502"},{"url":"https://git.kernel.org/stable/c/2afc2d5098866518a5c446a2e647b1b3f43daaf4"},{"url":"https://git.kernel.org/stable/c/c058786b09cfab080125bc3ee7928a181dcbd37a"},{"url":"https://git.kernel.org/stable/c/8709c66e665a2a09192853d4f3d0fb4bd0f76403"},{"url":"https://git.kernel.org/stable/c/2c1fb2335f5e3afb34f91bc07ecb63517c328090"}],"tags":["cve.org"],"epss":0.00173,"epssPercentile":0.06724,"ingestedAt":"2026-11-06T18:00:12.614Z","slug":"CVE-2026-68309","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()\n\nmt76_connac_get_he_phy_cap routine can theoretically return NULL so\ncheck cap pointer before dereferencing it.\n\n## Affected\n\n- `Linux >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 < d1f8705d6545d20950991785306d08884b0056fc`\n- `Linux >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 < 91eb15c026debd8b7bfbd83f062e6245a4e69964`\n- `Linux >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 < b09508dd7bc4a8948ea00603041a918c09788502`\n- `Linux >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 < 2afc2d5098866518a5c446a2e647b1b3f43daaf4`\n- `Linux >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 < c058786b09cfab080125bc3ee7928a181dcbd37a`\n- `Linux >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 < 8709c66e665a2a09192853d4f3d0fb4bd0f76403`\n- `Linux >= d0e274af2f2e44b9d496f5d2c0431fdd2ea76fb8 < 2c1fb2335f5e3afb34f91bc07ecb63517c328090`\n- `Linux 5.12`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}