---
id: CVE-2026-68406
title: 'wifi: cfg80211: validate PMSR FTM preamble range'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: cfg80211: validate PMSR FTM preamble range

  PMSR FTM request parsing accepts preamble values outside the
  enumerated nl80211 preamble range.

  Reject out-of-range v…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 <
    73ada9f23c2c7fac74474ea2a38ceb265bae17f1
  - >-
    Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 <
    2b97fa1bce7731f6a244f3d4407c61858f09b93f
  - >-
    Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 <
    9b33f260db3971f572dda0b45dd28d477cf51ed1
  - >-
    Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 <
    44ea65d779e2d23b2264fea6af2d0c666a3ec9fb
  - >-
    Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 <
    922d71fbaf99c1d5318151a0cb0a42ad448d07d9
  - >-
    Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 <
    cfbda103aeae61071a122a6fc2bfe98cffbd7165
  - >-
    Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 <
    58320cb47df2accc7a20bb72c0150280732fa58f
  - >-
    Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 <
    36230936468f0ba4930e94aef496fc229d4bb951
  - Linux 5.0
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:48:48.662258Z'
published: '2026-08-10'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:15.678Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-68406'
references:
  - url: 'https://git.kernel.org/stable/c/73ada9f23c2c7fac74474ea2a38ceb265bae17f1'
  - url: 'https://git.kernel.org/stable/c/2b97fa1bce7731f6a244f3d4407c61858f09b93f'
  - url: 'https://git.kernel.org/stable/c/9b33f260db3971f572dda0b45dd28d477cf51ed1'
  - url: 'https://git.kernel.org/stable/c/44ea65d779e2d23b2264fea6af2d0c666a3ec9fb'
  - url: 'https://git.kernel.org/stable/c/922d71fbaf99c1d5318151a0cb0a42ad448d07d9'
  - url: 'https://git.kernel.org/stable/c/cfbda103aeae61071a122a6fc2bfe98cffbd7165'
  - url: 'https://git.kernel.org/stable/c/58320cb47df2accc7a20bb72c0150280732fa58f'
  - url: 'https://git.kernel.org/stable/c/36230936468f0ba4930e94aef496fc229d4bb951'
tags:
  - cve.org
epss: 0.00184
epssPercentile: 0.08085
ingestedAt: '2026-11-06T18:00:12.605Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: validate PMSR FTM preamble range

PMSR FTM request parsing accepts preamble values outside the
enumerated nl80211 preamble range.

Reject out-of-range values before using them in the parser capability
bit test using the policy.

[drop unnecessary check]

## Affected

- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 73ada9f23c2c7fac74474ea2a38ceb265bae17f1`
- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 2b97fa1bce7731f6a244f3d4407c61858f09b93f`
- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 9b33f260db3971f572dda0b45dd28d477cf51ed1`
- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 44ea65d779e2d23b2264fea6af2d0c666a3ec9fb`
- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 922d71fbaf99c1d5318151a0cb0a42ad448d07d9`
- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < cfbda103aeae61071a122a6fc2bfe98cffbd7165`
- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 58320cb47df2accc7a20bb72c0150280732fa58f`
- `Linux >= 9bb7e0f24e7e7d00daa1219b14539e2e602649b2 < 36230936468f0ba4930e94aef496fc229d4bb951`
- `Linux 5.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.