CVE-2026-68327 wan: wanxl: Only reset hardware after BAR mapping

In the Linux kernel, the following vulnerability has been resolved: wan: wanxl: Only reset hardware after BAR mapping wanxlpciinitone stores the freshly allocated card in driver data before the PLX BAR is mapped. Several early probe failures then unwind through wanxlpciremoveone, including failur...

CVE-2026-68322

CVE-2026-68322 concerns the Linux kernel RDS subsystem. When IPv6 is explicitly disabled with ipv6.disable=1, inet6_addr_lst is never initialized, because inet6_init() exits before addrconf_init() runs. This leads to a NULL dereference in __ipv6_chk_addr_and_flags() when attempting to bind an RDS...

CVE-2026-68322

In the Linux kernel, the following vulnerability has been resolved: rds: Fix inet6addrlst NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, inet6addrlst is never initialized because inet6init exits before addrconfinit is called to initialize it. An attempt t...

CVE-2026-68317 pds_core: fix auxiliary device add/del races

In the Linux kernel, the following vulnerability has been resolved: pdscore: fix auxiliary device add/del races Two paths add or delete the same slot pf-vfsvfid.padev: a VF's pdscresetdone and the PF's devlink enablevnet/disablevnet handler. They serialize on configlock, but neither guards the sl...

EUVD-2026-55412

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: guard link STA in decap offload mt7925stasetdecapoffload iterates over the vif validlinks mask when updating decap offload state for an MLO station. The station may not have a link STA for every valid link of...

CVE-2026-68310

Summary: In the Linux kernel, the wifi MT7915 path (mt76) had a vulnerability where mt7915_mcu_bss_he_tlv() and mt7915_mcu_sta_bfer_tlv() dereferenced the HE PHY capability returned by mt76_connac_get_he_phy_cap() without confirming it was non-NULL. If no capability entry matches the vif type, th...

CVE-2026-68310 wifi: mt76: mt7915: guard HE capability lookups

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: guard HE capability lookups mt7915mcubsshetlv and mt7915mcustabfertlv both run after checking HE support, then dereference the HE PHY capability returned by mt76connacgethephycap. That helper can return NULL...

CVE-2026-68309 wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: fix possible NULL-pointer deref in mt76connacmcuunibsshetlv mt76connacgethephycap routine can theoretically return NULL so check cap pointer before dereferencing it...

EUVD-2026-55410

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: fix possible NULL-pointer deref in mt76connacmcuunibsshetlv mt76connacgethephycap routine can theoretically return NULL so check cap pointer before dereferencing it...

CVE-2026-68309 wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: fix possible NULL-pointer deref in mt76connacmcuunibsshetlv mt76connacgethephycap routine can theoretically return NULL so check cap pointer before dereferencing it...

CVE-2026-68309

The vulnerability CVE-2026-68309 affects the Linux kernel driver for wifi mt76 (Connac) and fixes a NULL-pointer dereference in mt76_connac_mcu_uni_bss_he_tlv(). The root cause is that mt76_connac_get_he_phy_cap could return NULL, and the code may dereference the cap pointer without checking. A p...

EUVD-2026-55409

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: check pointer returned by mt76connacgethephycap mt76connacgethephycap routine can theoretically return NULL so check cap pointer before dereferencing it...

CVE-2026-68308 wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: check pointer returned by mt76connacgethephycap mt76connacgethephycap routine can theoretically return NULL so check cap pointer before dereferencing it...

CVE-2026-68308

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: check pointer returned by mt76connacgethephycap mt76connacgethephycap routine can theoretically return NULL so check cap pointer before dereferencing it...

CVE-2026-68308 wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: check pointer returned by mt76connacgethephycap mt76connacgethephycap routine can theoretically return NULL so check cap pointer before dereferencing it...

CVE-2026-68308

CVE-2026-68308 details a Linux kernel issue in the mt76 mt7996 driver where the routine mt76_connac_get_he_phy_cap() can theoretically return NULL. The vulnerability arises from dereferencing the cap pointer without validating it first; the fix is to check the pointer before use. The issue has be...

CVE-2026-68307 wifi: mt76: mt7925: fix crash in reset link replay

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix crash in reset link replay During reset recovery, mt7925vifconnectiter replays firmware state for links tracked in mvif-validlinks. After MLO link changes or MCU timeout recovery, the driver bitmap can...

CVE-2026-68306 wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996mcustabfereht mt76connacgetehtphycap routine can theoretically return NULL so check cap pointer before dereferencing it...

EUVD-2026-55407

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996mcustabfereht mt76connacgetehtphycap routine can theoretically return NULL so check cap pointer before dereferencing it...

CVE-2026-68306

In the Linux kernel, the wifi mt76 mt7996 driver vulnerability CVE-2026-68306 could cause a NULL pointer dereference in mt7996_mcu_sta_bfer_eht() if mt76_connac_get_eht_phy_cap() returns NULL. The advisory notes that the cap pointer must be checked before dereferencing it, and the issue has been ...