CVE-2026-68406None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate PMSR FTM preamble range PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range. Reject out-of-range v…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: validate PMSR FTM preamble range
PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range.
Reject out-of-range values before using them in the parser capability bit test using the policy.
[drop unnecessary check]
Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 73ada9f23c2c7fac74474ea2a38ceb265bae17f1Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 2b97fa1bce7731f6a244f3d4407c61858f09b93fLinux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 9b33f260db3971f572dda0b45dd28d477cf51ed1Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 44ea65d779e2d23b2264fea6af2d0c666a3ec9fbLinux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 922d71fbaf99c1d5318151a0cb0a42ad448d07d9Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < cfbda103aeae61071a122a6fc2bfe98cffbd7165Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 58320cb47df2accc7a20bb72c0150280732fa58fLinux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 36230936468f0ba4930e94aef496fc229d4bb951Linux 5.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses