CVE-2026-68373

A flaw was found in the Linux kernel's at76c50x-usb Wi-Fi driver. A remote attacker could exploit a length underflow vulnerability in the at76guessfreq function by sending a specially crafted Wi-Fi frame. This can cause an out-of-bounds read during the scanning process, potentially leading to a...

CVE-2026-68373

The CVE-2026-68373 entry documents a Linux kernel vulnerability in the wifi: at76c50x-usb driver, where at76_guess_freq() can underflow when processing beacon and probe response frames. If a frame is shorter than the 36-byte element offset (el_off), the subtraction len -= el_off causes an oversiz...