CVE-2026-68355

A flaw was found in the ath11k component of the Linux kernel. When processing Wi-Fi (wireless fidelity) data, a specific function can attempt to access memory outside of its allocated buffer. This buffer underflow occurs if the first entry in a data structure has a zero buffer address, leading to an out-of-bounds read. This could potentially lead to system instability or a denial of service (DoS).

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation requires a system equipped with specific Qualcomm ath11k wireless hardware and primarily results in a denial of service through a kernel crash. Enterprise server environments rarely use ath11k wireless network adapters, significantly limiting the attack surface in standard deployments. In environments where this wireless hardware is used, processing malformed receive descriptors can cause out-of-bounds memory access leading to system instability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.