CVE-2026-68199

The CVE concerns the Linux kernel wifi component ath6kl, where aggr_recv_addba_req_evt() does not return when the firmware-supplied win_sz is outside the valid range [AGGR_WIN_SZ_MIN, AGGR_WIN_SZ_MAX]. This causes out-of-range win_sz to be used in TID_WINDOW_SZ() to compute a kzalloc size, storin...