{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"085a5fde5bac29c01059e69399b417e91c0a6c18","status":"affected","version":"d5c65159f2895379e11ca13f62feabe93278985d","versionType":"git"},{"lessThan":"31ea4b175bc3ab430be15834d9ee8a1ce65bee15","status":"affected","version":"d5c65159f2895379e11ca13f62feabe93278985d","versionType":"git"},{"lessThan":"20d18a5ec6ec364fcaf0d03af6fc43dcc42c6591","status":"affected","version":"d5c65159f2895379e11ca13f62feabe93278985d","versionType":"git"},{"lessThan":"69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a","status":"affected","version":"d5c65159f2895379e11ca13f62feabe93278985d","versionType":"git"},{"lessThan":"904367381a922aa2dc3e8bd2488e6c9180516c7a","status":"affected","version":"d5c65159f2895379e11ca13f62feabe93278985d","versionType":"git"},{"lessThan":"a154ca3c441a67d36b3a9ea63a4f11b06abe6223","status":"affected","version":"d5c65159f2895379e11ca13f62feabe93278985d","versionType":"git"},{"lessThan":"725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5","status":"affected","version":"d5c65159f2895379e11ca13f62feabe93278985d","versionType":"git"},{"lessThan":"7f11e70629650ff6ea140984e5ce188b775b2683","status":"affected","version":"d5c65159f2895379e11ca13f62feabe93278985d","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.6"},{"lessThan":"5.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.265","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.216","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.183","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.148","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.101","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.42","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.6","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-68355","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()\n\nWhen the first entry in msdu_details has a zero buffer address,\nthe code accesses msdu_details[i - 1] with i == 0, causing a\nbuffer underflow.\n\nFix similarly to ath12k_wifi7_hal_rx_msdu_list_get() by adding\na separate check for i == 0 before the main condition to prevent\nthe out-of-bounds access.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.","epss":{"date":"2026-11-06","percentile":0.08104,"score":0.00184},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793985570310,"publishedAt":1786363412321,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/085a5fde5bac29c01059e69399b417e91c0a6c18"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/31ea4b175bc3ab430be15834d9ee8a1ce65bee15"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/20d18a5ec6ec364fcaf0d03af6fc43dcc42c6591"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/904367381a922aa2dc3e8bd2488e6c9180516c7a"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/a154ca3c441a67d36b3a9ea63a4f11b06abe6223"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7f11e70629650ff6ea140984e5ce188b775b2683"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/085a5fde5bac29c01059e69399b417e91c0a6c18"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/20d18a5ec6ec364fcaf0d03af6fc43dcc42c6591"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/31ea4b175bc3ab430be15834d9ee8a1ce65bee15"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/7f11e70629650ff6ea140984e5ce188b775b2683"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/904367381a922aa2dc3e8bd2488e6c9180516c7a"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/a154ca3c441a67d36b3a9ea63a4f11b06abe6223"}],"remediation":[],"revision":"16ec4bcafc7fc03f52fc9ab0d36103267452dd89964d516af4152ee2fa04e344","sources":[{"modifiedAt":1793984114218,"name":"CNA: Linux","retrievedAt":1793985979985,"url":"https://www.cve.org/CVERecord?id=CVE-2026-68355"},{"modifiedAt":1793985570310,"name":"NVD","retrievedAt":1793989637542,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68355"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793985995022,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-68355"}],"ssvc":{"assessedAt":1793983680630,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()","updatedAt":1793989637542}