CVE-2026-68353

A flaw was found in the Linux kernel's ath6kl Wi-Fi driver. The ath6klwmitxcompleteeventrx function, responsible for handling Wi-Fi messages, does not properly validate the nummsg field provided by the firmware against the buffer length. A malicious or compromised firmware could send an inflated...

CVE-2026-68409

A flaw was found in the mac80211 Wi-Fi driver of the Linux kernel. When an MLO Multi-Link Operation link is removed, the RX statistics per-CPU buffer is freed immediately, while the link container is deferred to RCU Read-Copy-Update. This timing issue can lead to a use-after-free vulnerability,...

CVE-2026-68352

A flaw was found in the Linux kernel's ath6kl Wi-Fi driver. The driver does not properly validate the lengths of firmware-controlled information elements IEs during a connect event. This vulnerability allows the sum of these lengths to exceed the allocated buffer, resulting in an out-of-bounds...

CVE-2026-68410

A flaw was found in the Linux kernel's Libertas Wi-Fi driver. The helperfirmwarecb function neglects to free a single-stage firmware image after a successful asynchronous load. This leads to a memory leak in the USB firmware-download path. This issue could potentially lead to system instability o...

CVE-2026-68190

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. The rtwgetwpsie function, responsible for processing network frame data, fails to properly validate the size of incoming information elements IEs. This oversight allows an attacker to trigger an out-of-bounds read, potentially leading...

CVE-2026-68412

A flaw was found in the Linux kernel's Wi-Fi subsystem, specifically within the cfg80211 component. This vulnerability, located in the cfg80211wextsiwscan function, can lead to a memory leak. A local attacker could exploit this by sending a crafted Wi-Fi scan request with an Extended Service Set...

CVE-2026-68402

A flaw was found in the Linux kernel's Wi-Fi subsystem cfg80211. The cfg80211iselementinherited function does not properly validate the length of extension elements. A remote attacker, by sending a specially crafted Wi-Fi frame from an Access Point AP, could trigger a one-octet slab-out-of-bounds...

CVE-2026-68195

A flaw was found in the Linux kernel's mt76 Wi-Fi driver, specifically affecting the mt7615 component. This vulnerability occurs because a memory-mapped I/O MMIO specific event, PKTTYPETXRXNOTIFY, is incorrectly processed on non-MMIO buses such as USB and SDIO. When this event is dispatched, it...

CVE-2026-68414

A flaw was found in the Linux kernel's cfg80211 Wi-Fi subsystem. When a Wi-Fi device is unregistered, the system fails to properly cancel pending scheduled scan results work. This can lead to a use-after-free vulnerability, where the system attempts to access memory that has already been released...

CVE-2026-68355

A flaw was found in the ath11k component of the Linux kernel. When processing Wi-Fi wireless fidelity data, a specific function can attempt to access memory outside of its allocated buffer. This buffer underflow occurs if the first entry in a data structure has a zero buffer address, leading to a...

CVE-2026-64441

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtwgetsecie, rtwgetwapiie, and rtwgetwpsattr Three IE/attribute parsing functions have missing bounds checks. rtwgetsecie and rtwgetwapiie iterate over a raw IE buffer without verifying that t...

OPENSUSE-SU-2026:21415-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues - CVE-2026-58374: Fixed a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be MLO association request processing allows an unauthenticated user to send a crafted management frame and cause an out-of-bounds write bsc1269892...

CVE-2026-11503 Tenda CX12L Wi-Fi Configuration Endpoint fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow

A security vulnerability has been detected in Tenda CX12L 16.03.53.12. The affected element is the function formfastsettingwifiset of the file /goform/fastsettingwifiset of the component Wi-Fi Configuration Endpoint. Such manipulation of the argument ssid leads to stack-based buffer overflow. The...

CVE-2025-29338

CVE-2025-29338 affects the NXP moal.ko Wi‑Fi kernel driver (driver version 5.1.7.10) across firmware builds from v17.92.1.p149.43 to v17.92.1.p149.157. The root cause is a stack‑based buffer overflow in the parsing path: woal_setup_module_param allocates a fixed stack buffer and parse_cfg_get_lin...

Apple多款产品 安全漏洞

Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have...

PYSEC-2026-135

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

CVE-2025-52908

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 1 of 2...

CVE-2025-52909

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 2 of 2...

EUVD-2025-209249

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a double free. An attacker can trigger a race condition by invoking an...

PT-2026-30704

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000 Description A flaw exists in the Wi-Fi driver of the specified Samsung processors due to improper synchronization on a...