Denial of Service Vulnerability in Linux Kernel Affecting Wi-Fi Functionality

CVE-2026-68411

What is CVE-2026-68411?

A vulnerability in the Linux kernel's Wi-Fi subsystem can lead to a denial of service condition due to improper handling of message lengths. The issue arises in the function hwsim_virtio_rx_work(), where lengths reported by a backend device may exceed buffer limits, resulting in a panic state. The vulnerability can be triggered by a malicious host, causing system disruptions. The fix implements checks to ensure that the reported lengths do not exceed the socket buffer's available space, thus safeguarding the integrity and stability of the kernel while preventing potential exploitation.

References