CVE-2026-68306 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() mt76_connac_get_eht_phy_cap routine can theoretically return NULL so check cap pointer before dereferencing it.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products

References

Link	Providers
https://git.kernel.org/stable/c/2b1882cf313ae44181146629b3578a7826c672c9
https://git.kernel.org/stable/c/2fffc472bec490c8357defcee9c075ca74467352
https://git.kernel.org/stable/c/3e4f848f4a620e1d77c38459e73cf3b362f7bc6b
https://git.kernel.org/stable/c/45c496756c6f6df6c3aeb5b2cb996993d2f14687
https://git.kernel.org/stable/c/d5628f39fccc107dca00b98a491d9848898599f7

History

Mon, 10 Aug 2026 17:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-476

Mon, 10 Aug 2026 12:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() mt76_connac_get_eht_phy_cap routine can theoretically return NULL so check cap pointer before dereferencing it.
Title		wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/2b1882cf313ae44181146629b3578a7826c672c9 https://git.kernel.org/stable/c/2fffc472bec490c8357defcee9c075ca74467352 https://git.kernel.org/stable/c/3e4f848f4a620e1d77c38459e73cf3b362f7bc6b https://git.kernel.org/stable/c/45c496756c6f6df6c3aeb5b2cb996993d2f14687 https://git.kernel.org/stable/c/d5628f39fccc107dca00b98a491d9848898599f7

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-10T12:02:40.907Z

Updated: 2026-08-10T12:02:40.907Z

Reserved: 2026-07-30T09:28:09.381Z

Link: CVE-2026-68306

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-08-10T17:15:03Z

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68306", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-30T09:28:09.381Z", "datePublished": "2026-08-10T12:02:40.907Z", "dateUpdated": "2026-08-10T12:02:40.907Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-10T12:02:40.907Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()\n\nmt76_connac_get_eht_phy_cap routine can theoretically return NULL so\ncheck cap pointer before dereferencing it."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/mediatek/mt76/mt7996/mcu.c"], "versions": [{"version": "ba01944adee9f4a71cf2879b9529057fd8de1972", "lessThan": "2b1882cf313ae44181146629b3578a7826c672c9", "status": "affected", "versionType": "git"}, {"version": "ba01944adee9f4a71cf2879b9529057fd8de1972", "lessThan": "3e4f848f4a620e1d77c38459e73cf3b362f7bc6b", "status": "affected", "versionType": "git"}, {"version": "ba01944adee9f4a71cf2879b9529057fd8de1972", "lessThan": "d5628f39fccc107dca00b98a491d9848898599f7", "status": "affected", "versionType": "git"}, {"version": "ba01944adee9f4a71cf2879b9529057fd8de1972", "lessThan": "45c496756c6f6df6c3aeb5b2cb996993d2f14687", "status": "affected", "versionType": "git"}, {"version": "ba01944adee9f4a71cf2879b9529057fd8de1972", "lessThan": "2fffc472bec490c8357defcee9c075ca74467352", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/mediatek/mt76/mt7996/mcu.c"], "versions": [{"version": "6.3", "status": "affected"}, {"version": "0", "lessThan": "6.3", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.148", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.101", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.42", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.6", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc5", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.3", "versionEndExcluding": "6.6.148"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.3", "versionEndExcluding": "6.12.101"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.3", "versionEndExcluding": "6.18.42"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.3", "versionEndExcluding": "7.1.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.3", "versionEndExcluding": "7.2-rc5"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/2b1882cf313ae44181146629b3578a7826c672c9"}, {"url": "https://git.kernel.org/stable/c/3e4f848f4a620e1d77c38459e73cf3b362f7bc6b"}, {"url": "https://git.kernel.org/stable/c/d5628f39fccc107dca00b98a491d9848898599f7"}, {"url": "https://git.kernel.org/stable/c/45c496756c6f6df6c3aeb5b2cb996993d2f14687"}, {"url": "https://git.kernel.org/stable/c/2fffc472bec490c8357defcee9c075ca74467352"}], "title": "wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()", "x_generator": {"engine": "bippy-1.2.0"}}}}