CVE-2026-68469

A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. During Wi-Fi association, if a power-save sleep event occurs while an association command is in flight, the driver can incorrectly set the power-save state. This prevents the necessary sleep confirmation, leading to Wi-Fi scan requests becoming permanently busy. A local user could exploit this to cause a Denial of Service (DoS) for Wi-Fi scanning functionality.

This vulnerability is rated as having a Low impact because exploitation requires local system access and is restricted to systems utilizing specific Marvell wireless networking hardware. The issue affects only the mwifiex driver during wireless roaming and association sequences, resulting in unresponsive scanning capabilities without granting elevated privileges or causing system-wide crashes. Furthermore, wireless drivers are infrequently utilized in standard Red Hat enterprise server and cloud deployments, substantially limiting the operational exposure of affected environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.