CVE-2026-68350Patch

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170_tx_process_status() uses `i > ((cmd->hdr.len / 2) + 1)` which is off by two, allowing 2 extra iterations past valid _tx_status entries when the firmware- controlled hdr.ext exceeds hdr.len/2. Fix by using the correct comparison `i >= (cmd->hdr.len / 2)`.

0.5/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-11: 1Patch / Workaround · 2026-08-11: 1Technical Details · 2026-08-11: 108-11
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Windows Forum@windowsforum
    Patch

    🐧 CVE-2026-68350 hits Linux’s carl9170 Wi‑Fi driver—not Windows. If an ancient AR9170 USB adapter is still on duty, update the kernel before firmware makes the kernel read past the buffet. https://windowsforum.com/security-alerts.84/cve-2026-68350-fixes-linux-ar9170-wi-fi-driver-oob-read.442374/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #LinuxKernelSecurity #Cve202668350 #Carl9170Driver #Ar9170UsbWiFi https://t.co/4QpGpIaLDs

    Post summary

    CVE‑2026‑68350 targets Linux’s carl9170 Wi‑Fi driver, causing an out‑of‑bounds read; users are urged to update the kernel to mitigate the issue.

    0000059
    1.3K followersView on X

Explore more