{"id":"CVE-2026-68406","title":"wifi: cfg80211: validate PMSR FTM preamble range","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: validate PMSR FTM preamble range\n\nPMSR FTM request parsing accepts preamble values outside the\nenumerated nl80211 preamble range.\n\nReject out-of-range v…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 73ada9f23c2c7fac74474ea2a38ceb265bae17f1","Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 2b97fa1bce7731f6a244f3d4407c61858f09b93f","Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 9b33f260db3971f572dda0b45dd28d477cf51ed1","Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 44ea65d779e2d23b2264fea6af2d0c666a3ec9fb","Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 922d71fbaf99c1d5318151a0cb0a42ad448d07d9","Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < cfbda103aeae61071a122a6fc2bfe98cffbd7165","Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 58320cb47df2accc7a20bb72c0150280732fa58f","Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 36230936468f0ba4930e94aef496fc229d4bb951","Linux 5.0"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:48:48.662258Z"},"published":"2026-08-10","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:55:15.678Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-68406","references":[{"url":"https://git.kernel.org/stable/c/73ada9f23c2c7fac74474ea2a38ceb265bae17f1"},{"url":"https://git.kernel.org/stable/c/2b97fa1bce7731f6a244f3d4407c61858f09b93f"},{"url":"https://git.kernel.org/stable/c/9b33f260db3971f572dda0b45dd28d477cf51ed1"},{"url":"https://git.kernel.org/stable/c/44ea65d779e2d23b2264fea6af2d0c666a3ec9fb"},{"url":"https://git.kernel.org/stable/c/922d71fbaf99c1d5318151a0cb0a42ad448d07d9"},{"url":"https://git.kernel.org/stable/c/cfbda103aeae61071a122a6fc2bfe98cffbd7165"},{"url":"https://git.kernel.org/stable/c/58320cb47df2accc7a20bb72c0150280732fa58f"},{"url":"https://git.kernel.org/stable/c/36230936468f0ba4930e94aef496fc229d4bb951"}],"tags":["cve.org"],"epss":0.00184,"epssPercentile":0.08085,"ingestedAt":"2026-11-06T18:00:12.605Z","slug":"CVE-2026-68406","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: validate PMSR FTM preamble range\n\nPMSR FTM request parsing accepts preamble values outside the\nenumerated nl80211 preamble range.\n\nReject out-of-range values before using them in the parser capability\nbit test using the policy.\n\n[drop unnecessary check]\n\n## Affected\n\n- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 73ada9f23c2c7fac74474ea2a38ceb265bae17f1`\n- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 2b97fa1bce7731f6a244f3d4407c61858f09b93f`\n- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 9b33f260db3971f572dda0b45dd28d477cf51ed1`\n- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 44ea65d779e2d23b2264fea6af2d0c666a3ec9fb`\n- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 922d71fbaf99c1d5318151a0cb0a42ad448d07d9`\n- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < cfbda103aeae61071a122a6fc2bfe98cffbd7165`\n- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 58320cb47df2accc7a20bb72c0150280732fa58f`\n- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 36230936468f0ba4930e94aef496fc229d4bb951`\n- `Linux 5.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}