CVE-2026-68310

Source
https://cve.org/CVERecord?id=CVE-2026-68310
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68310.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-68310
Downstream
Published
2026-08-10T12:02:44Z
Modified
2026-08-21T03:30:27Z
Summary
wifi: mt76: mt7915: guard HE capability lookups
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7915: guard HE capability lookups

mt7915_mcu_bss_he_tlv() and mt7915_mcu_sta_bfer_tlv() both run after checking HE support, then dereference the HE PHY capability returned by mt76_connac_get_he_phy_cap(). That helper can return NULL when no capability entry matches the vif type.

Fetch the capability before appending the TLV and skip the HE-specific setup when no matching capability is available.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68310.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e6d557a78b6016eee7b9cd6832343efd32cc0b27
Fixed
8d5f1f4d2ea2c9d626ccc28dba7ea0df862acc67
Fixed
23a2b98e754da04e0e90314d5fa8ca44349590fb
Fixed
a031f454f14e3e76ad03bcb23918e1a82b4b0869
Fixed
871549814eb4da081f1e93cc0c7ea626a310a966
Fixed
6f99a5667c6c7c3e0da1d3c4dc8dfb103042609e
Fixed
8e9db062654a388d0fa587acbeeae68dd33eba41

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68310.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
6.1.183
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.148
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.101
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.42
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.6

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68310.json"