CVE-2026-68411

A flaw was found in the Linux kernel's mac80211_hwsim component. A malicious backend device could report an oversized receive length to the hwsim_virtio_rx_work() function. This could cause the system to write past the end of a buffer, leading to a kernel panic and a denial of service (DoS) for the guest system.

This vulnerability is rated as Moderate because exploitation is restricted to triggering a local guest denial of service without compromising system confidentiality or integrity. The affected mac80211_hwsim driver is a virtual wireless testing device that is typically not utilized in standard production environments. An exploit requires a malicious or compromised hypervisor backend to provide invalid receive buffer lengths to the guest kernel. Furthermore, standard Red Hat Enterprise Linux releases do not include the vulnerable virtio transport support for this driver.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.