CVE-2026-68350

A flaw was found in the Linux kernel's carl9170 Wi-Fi driver. An out-of-bounds read vulnerability exists within the carl9170_tx_process_status() function. This issue is caused by an off-by-two error in a bounds check, allowing the system to read beyond the intended memory buffer when processing firmware-controlled data. This could potentially lead to information disclosure or system instability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.