CVE-2026-68199

A flaw was found in the Linux kernel's ath6kl Wi-Fi driver. This vulnerability allows a local attacker to cause an out-of-bounds memory access. The flaw occurs when the firmware provides an invalid window size during an ADDBA (Add Block Ack) request, leading to incorrect memory allocation. This can result in a denial of service or potentially lead to further system compromise.

In standard Red Hat Enterprise Linux deployments, this vulnerability presents minimal operational risk because the ath6kl wireless driver is not built or enabled in supported enterprise kernels. Exploitation requires specialized Atheros wireless hardware and manipulated firmware responses during block acknowledgment negotiations to induce improper kernel memory allocation. Systems lacking this specific wireless chipset are unaffected, as triggering the memory corruption requires compromised or hostile device firmware.