CVE-2026-68311

CVE CVE-2026-68311EUVD EUVD-2026-55412Published 2026-08-10T12:02:45.000Z

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: guard link STA in decap offload mt7925_sta_set_decap_offload() iterates over the vif valid_links mask when updating decap offload state for an MLO station. The station may not have a link STA for every valid link of the vif, so mt792x_sta_to_link() can return NULL for a link that belongs to the vif but not to the station. The function currently dereferences mlink before checking whether the link WCID is ready. If mlink is NULL, setting or clearing MT_WCID_FLAG_HDR_TRANS dereferences a NULL pointer. Skip links without a station link before touching mlink->wcid.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

Linux — Linux b859ad65309a5f1654e8b284de582831fc88e2d8 <1e608cae1ba0b4a600b752efa223fd2be376b143; patch: 7.2-rc5; b859ad65309a5f1654e8b284de582831fc88e2d8 <96ea44f2269f30364cffa054ee3a87e595bef0d4; patch: 7.1.6; patch: 0; 6.11; b859ad65309a5f1654e8b284de582831fc88e2d8 <d86883f7e8f03a5b81b4e59f2c0b6c05f79e01fd; patch: 6.12.101; patch: 6.18.42; b859ad65309a5f1654e8b284de582831fc88e2d8 <f1ee53e08fdd2906e90c6a6d71e1368fcd52bfc3

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

Linux — Linux

Does this concern one of your customers?

This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.

Try it for 28 days

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.