Cloudanix VulnDB

CVE-2026-68406

None

CVSS

—

EPSS

0.2%

Published

Aug 10, 2026

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A wireless network feature on Linux systems could accept invalid settings that might cause errors or instability.

Exploitation
Local Privilege
Attacker needs
Low Privilege
Complexity
Moderate
Impact
Other
Component
OS kernel
Class
Improper Input Validation
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

The vulnerability permits out-of-range preamble values in PMSR FTM request parsing to reach capability bit tests without prior validation against the nl80211 preamble enumeration, allowing improper input to be processed.

Why it matters to the business

Potential for unexpected behavior or crashes in wireless subsystem handling on affected Linux systems, though low exploitability metrics and absence from known exploitation lists indicate limited immediate operational disruption for most environments.

How an attack unfolds

An attacker crafts a PMSR FTM request containing a preamble value outside the valid enumerated range, submits it through the wireless configuration interface, and triggers the parser to perform a bit test on the invalid value before the range check can reject it.

How to fix it

Apply the kernel patch that enforces policy-based range validation on preamble values before any bit tests; rebuild and deploy updated kernels to all affected systems.

How to confirm the fix worked

Confirm the fix by inspecting the updated source for the added range check using the nl80211 preamble policy prior to capability testing; test with deliberately out-of-range preamble values to verify rejection.

Typical attack path

  1. Identify a system exposing wireless configuration interfaces accepting PMSR FTM requests
  2. Construct a request packet or netlink message with preamble field set to an out-of-range integer
  3. Submit the malformed request to the cfg80211 parsing code
  4. Trigger the capability bit test using the unchecked value to induce invalid behavior

How to detect it

Examine kernel logs and netlink message traces for PMSR FTM request parsing events that reach capability checks without prior range rejection; look for anomalous preamble values in wireless subsystem logs.

What your security team should do

  • Prioritize kernel updates on systems handling wireless management traffic
  • Monitor upstream Linux kernel releases for the merged validation fix
  • Review wireless configuration code paths for similar unchecked enumeration values

The record

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate PMSR FTM preamble range PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range. Reject out-of-range values before using them in the parser capability bit test using the policy. [drop unnecessary check]

Affected packages

Ecosystem Package Introduced Fixed