CVE-2026-68196

The CVE-2026-68196 issue affects Linux kernel WiFi Wilc1000: the function wilc_parse_assoc_resp_info computes ies_len as buffer_len - sizeof(*res) without validating that buffer_len >= sizeof(struct wilc_assoc_resp) (6 bytes). For frames shorter than the 6-byte fixed header, subtraction wraps;...

EUVD-2026-55297

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: validate assoc response length before subtracting header wilcparseassocrespinfo computes the trailing IE length as ieslen = bufferlen - sizeofres; without first checking that bufferlen is at least sizeofstruct...