CVE-2026-68199 | Linux Kernel up to 7.2-rc4 ath6kl aggr_recv_addba_req_evt win_sz out-of-bounds

A vulnerability classified as very critical has been found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. The affected element is the function aggr_recv_addba_req_evt of the component ath6kl. This manipulation of the argument win_sz causes out-of-bounds read.

This vulnerability is tracked as CVE-2026-68199. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More