CVE-2026-68352

A flaw was found in the Linux kernel's ath6kl Wi-Fi driver. The driver does not properly validate the lengths of firmware-controlled information elements (IEs) during a connect event. This vulnerability allows the sum of these lengths to exceed the allocated buffer, resulting in an out-of-bounds read. An attacker could exploit this to cause state corruption within the driver, potentially leading to a denial of service.

This issue affects Qualcomm ath6kl Wi-Fi. Firmware-controlled IE lengths in connect events are not validated against buffer size, causing OOB reads. Systems without ath6kl hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the ath6kl module from loading. See https://access.redhat.com/solutions/41278 for instructions.