CVE-2026-68351

A flaw was found in the carl9170 Wi-Fi driver in the Linux kernel. When the firmware sends a command response with a length mismatch, the carl9170cmdcallback function performs an out-of-bounds read. This occurs because the memcpy operation copies more data than the allocated buffer, potentially...