{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"73ada9f23c2c7fac74474ea2a38ceb265bae17f1","status":"affected","version":"9bb7e0f24e7e7d00daa1219b14539e2e602649b2","versionType":"git"},{"lessThan":"2b97fa1bce7731f6a244f3d4407c61858f09b93f","status":"affected","version":"9bb7e0f24e7e7d00daa1219b14539e2e602649b2","versionType":"git"},{"lessThan":"9b33f260db3971f572dda0b45dd28d477cf51ed1","status":"affected","version":"9bb7e0f24e7e7d00daa1219b14539e2e602649b2","versionType":"git"},{"lessThan":"44ea65d779e2d23b2264fea6af2d0c666a3ec9fb","status":"affected","version":"9bb7e0f24e7e7d00daa1219b14539e2e602649b2","versionType":"git"},{"lessThan":"922d71fbaf99c1d5318151a0cb0a42ad448d07d9","status":"affected","version":"9bb7e0f24e7e7d00daa1219b14539e2e602649b2","versionType":"git"},{"lessThan":"cfbda103aeae61071a122a6fc2bfe98cffbd7165","status":"affected","version":"9bb7e0f24e7e7d00daa1219b14539e2e602649b2","versionType":"git"},{"lessThan":"58320cb47df2accc7a20bb72c0150280732fa58f","status":"affected","version":"9bb7e0f24e7e7d00daa1219b14539e2e602649b2","versionType":"git"},{"lessThan":"36230936468f0ba4930e94aef496fc229d4bb951","status":"affected","version":"9bb7e0f24e7e7d00daa1219b14539e2e602649b2","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.0"},{"lessThan":"5.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.265","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.216","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.183","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.148","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.101","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.42","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.6","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-68406","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: validate PMSR FTM preamble range\n\nPMSR FTM request parsing accepts preamble values outside the\nenumerated nl80211 preamble range.\n\nReject out-of-range values before using them in the parser capability\nbit test using the policy.\n\n[drop unnecessary check]","epss":{"date":"2026-11-06","percentile":0.08104,"score":0.00184},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793985571947,"publishedAt":1786363466251,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/73ada9f23c2c7fac74474ea2a38ceb265bae17f1"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/2b97fa1bce7731f6a244f3d4407c61858f09b93f"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/9b33f260db3971f572dda0b45dd28d477cf51ed1"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/44ea65d779e2d23b2264fea6af2d0c666a3ec9fb"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/922d71fbaf99c1d5318151a0cb0a42ad448d07d9"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/cfbda103aeae61071a122a6fc2bfe98cffbd7165"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/58320cb47df2accc7a20bb72c0150280732fa58f"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/36230936468f0ba4930e94aef496fc229d4bb951"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/2b97fa1bce7731f6a244f3d4407c61858f09b93f"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/36230936468f0ba4930e94aef496fc229d4bb951"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/44ea65d779e2d23b2264fea6af2d0c666a3ec9fb"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/58320cb47df2accc7a20bb72c0150280732fa58f"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/73ada9f23c2c7fac74474ea2a38ceb265bae17f1"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/922d71fbaf99c1d5318151a0cb0a42ad448d07d9"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/9b33f260db3971f572dda0b45dd28d477cf51ed1"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/cfbda103aeae61071a122a6fc2bfe98cffbd7165"}],"remediation":[],"revision":"d6e8e213745d4d5920ba2d66c03977d18fc29745d706ec7d682fce2fc39546d7","sources":[{"modifiedAt":1793984115678,"name":"CNA: Linux","retrievedAt":1793985992119,"url":"https://www.cve.org/CVERecord?id=CVE-2026-68406"},{"modifiedAt":1793985571947,"name":"NVD","retrievedAt":1793989641988,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68406"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793986041313,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-68406"}],"ssvc":{"assessedAt":1793983728662,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"wifi: cfg80211: validate PMSR FTM preamble range","updatedAt":1793989641988}