CVE-2026-68309

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability occurs because the mt76_connac_get_he_phy_cap routine can return a NULL value, which is then dereferenced without proper validation. This can lead to a NULL-pointer dereference, potentially causing a system crash and resulting in a Denial of Service (DoS).

This issue affects MediaTek mt76 connac Wi-Fi drivers broadly. mt76_connac_mcu_uni_bss_he_tlv() does not guard NULL from mt76_connac_get_he_phy_cap(). Systems without affected MediaTek Wi-Fi are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.