CVE-2026-68349

A flaw was found in the Linux kernel, specifically within the carl9170 Wi-Fi driver. This vulnerability is a buffer overflow that occurs in the rx_stream failover path. When processing certain USB transfers, the driver attempts to copy more data than its allocated buffer can hold. This can lead to a system crash, resulting in a Denial of Service (DoS) for the affected system.

Red Hat has evaluated this vulnerability as having a Moderate impact because exploitation requires attaching a specialized or compromised USB Wi-Fi device to the target host. Under default Red Hat Enterprise Linux server deployments, the carl9170 driver for Atheros AR9170 wireless adapters is not actively loaded unless corresponding USB hardware is physically connected. A local attacker or physically present adversary capable of providing crafted USB transfers could trigger a kernel panic, resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.