CVE-2026-68353 | Linux Kernel up to 7.2-rc4 ath6kl ath6kl_wmi_tx_complete_event_rx num_msg out-of-bounds

A vulnerability was found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. It has been rated as very critical. Affected by this issue is the function ath6kl_wmi_tx_complete_event_rx of the component ath6kl. This manipulation of the argument num_msg causes out-of-bounds read.

This vulnerability is handled as CVE-2026-68353. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More