CVE-2026-68353

The CVE-2026-68353 entry describes a Linux kernel vulnerability in the ath6kl WiFi driver where the firmware-controlled num_msg field (u8, 0–255) could drive a loop in ath6kl_wmi_tx_complete_event_rx() past the WMI event buffer, enabling out-of-bounds reads up to 1020 bytes. The fix adds a check ...