CVE-2026-68196

A flaw was found in the Linux kernel's wilc1000 Wi-Fi driver. This vulnerability occurs when processing a malformed association response, where the length of the response is not properly validated before calculating the length of trailing information elements. A remote attacker could send a specially crafted, short association response, leading to an out-of-bounds read. This could result in a denial of service (DoS) or potentially the disclosure of sensitive information.

This issue affects Atmel wilc1000 Wi-Fi. Association response IE length is computed without checking minimum header size, allowing integer underflow on malformed frames. Systems without wilc1000 hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the wilc1000 module from loading. See https://access.redhat.com/solutions/41278 for instructions.