CVE-2026-68353

The CVE-2026-68353 entry describes a Linux kernel vulnerability in the ath6kl WiFi driver where the firmware-controlled num_msg field (u8, 0–255) could drive a loop in ath6kl_wmi_tx_complete_event_rx() past the WMI event buffer, enabling out-of-bounds reads up to 1020 bytes. The fix adds a check ...

EUVD-2026-55454

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware nummsg in TX complete handler The firmware-controlled nummsg field u8, 0-255 drives the loop in ath6klwmitxcompleteeventrx without validation against the buffer length. This allows...