{"id":"CVE-2026-68412","title":"wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()\n\nIf the test against IEEE80211_MAX_SSID_LEN fails, then 'creq' leaks.\nUse the existing error handl…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 2a5193119269062608582418deba7af82844159a < f4114597b7949e90f4fa181342cf01400b8a5a75","Linux >= 2a5193119269062608582418deba7af82844159a < e67dc2b8d5ac4bb804000b6732768a9ae678912f","Linux >= 2a5193119269062608582418deba7af82844159a < 99d2e850c643e2c70fa165b722a1ad28347a8b3a","Linux >= 2a5193119269062608582418deba7af82844159a < c6659f66d4ee4841aafae5659d2ef5e4c5c63cb6","Linux 2.6.30"],"published":"2026-08-10","updated":"2026-10-21","sourceUpdated":"2026-10-21T12:44:04.216Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-68412","references":[{"url":"https://git.kernel.org/stable/c/f4114597b7949e90f4fa181342cf01400b8a5a75"},{"url":"https://git.kernel.org/stable/c/e67dc2b8d5ac4bb804000b6732768a9ae678912f"},{"url":"https://git.kernel.org/stable/c/99d2e850c643e2c70fa165b722a1ad28347a8b3a"},{"url":"https://git.kernel.org/stable/c/c6659f66d4ee4841aafae5659d2ef5e4c5c63cb6"}],"tags":["cve.org"],"epss":0.00198,"epssPercentile":0.08983,"ingestedAt":"2026-10-21T12:48:53.597Z","slug":"CVE-2026-68412","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()\n\nIf the test against IEEE80211_MAX_SSID_LEN fails, then 'creq' leaks.\nUse the existing error handling path to fix it.\n\n## Affected\n\n- `Linux >= 2a5193119269062608582418deba7af82844159a < f4114597b7949e90f4fa181342cf01400b8a5a75`\n- `Linux >= 2a5193119269062608582418deba7af82844159a < e67dc2b8d5ac4bb804000b6732768a9ae678912f`\n- `Linux >= 2a5193119269062608582418deba7af82844159a < 99d2e850c643e2c70fa165b722a1ad28347a8b3a`\n- `Linux >= 2a5193119269062608582418deba7af82844159a < c6659f66d4ee4841aafae5659d2ef5e4c5c63cb6`\n- `Linux 2.6.30`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}