CVE-2026-68472

A flaw was found in the Linux kernel's cfg80211 Wi-Fi subsystem. A remote attacker, by operating a malicious Access Point (AP), could send a specially crafted EHT Multi-Link Element (MLE) in an MBSSID beacon. This could cause the kernel to read beyond the intended memory boundary when processing the MLE, potentially leading to information disclosure or a denial of service (DoS).

Red Hat rates this vulnerability as Moderate impact because exploitation is constrained to adjacent wireless radio proximity and requires the target host to have wireless hardware actively processing network beacons. Enterprise deployments of Red Hat products rarely utilize Wi-Fi interfaces or wireless subsystems, significantly limiting exposure in standard environments. While an out-of-bounds read may cause a system denial of service or potential information leakage, arbitrary code execution is not possible.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.