CVE-2026-68373
kernel: Linux kernel: Out-of-bounds read in wifi driver due to length underflow
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's at76c50x-usb Wi-Fi driver. A remote attacker could exploit a length underflow vulnerability in the at76_guess_freq() function by sending a specially crafted Wi-Fi frame. This can cause an out-of-bounds read during the scanning process, potentially leading to a denial of service or the disclosure of sensitive information.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE-125 · Out-of-bounds Read