---
id: CVE-2026-68412
title: 'wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()

  If the test against IEEE80211_MAX_SSID_LEN fails, then 'creq' leaks.
  Use the existing error handl…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 2a5193119269062608582418deba7af82844159a <
    f4114597b7949e90f4fa181342cf01400b8a5a75
  - >-
    Linux >= 2a5193119269062608582418deba7af82844159a <
    e67dc2b8d5ac4bb804000b6732768a9ae678912f
  - >-
    Linux >= 2a5193119269062608582418deba7af82844159a <
    99d2e850c643e2c70fa165b722a1ad28347a8b3a
  - >-
    Linux >= 2a5193119269062608582418deba7af82844159a <
    c6659f66d4ee4841aafae5659d2ef5e4c5c63cb6
  - Linux 2.6.30
published: '2026-08-10'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:44:04.216Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-68412'
references:
  - url: 'https://git.kernel.org/stable/c/f4114597b7949e90f4fa181342cf01400b8a5a75'
  - url: 'https://git.kernel.org/stable/c/e67dc2b8d5ac4bb804000b6732768a9ae678912f'
  - url: 'https://git.kernel.org/stable/c/99d2e850c643e2c70fa165b722a1ad28347a8b3a'
  - url: 'https://git.kernel.org/stable/c/c6659f66d4ee4841aafae5659d2ef5e4c5c63cb6'
tags:
  - cve.org
epss: 0.00198
epssPercentile: 0.08983
ingestedAt: '2026-10-21T12:48:53.597Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()

If the test against IEEE80211_MAX_SSID_LEN fails, then 'creq' leaks.
Use the existing error handling path to fix it.

## Affected

- `Linux >= 2a5193119269062608582418deba7af82844159a < f4114597b7949e90f4fa181342cf01400b8a5a75`
- `Linux >= 2a5193119269062608582418deba7af82844159a < e67dc2b8d5ac4bb804000b6732768a9ae678912f`
- `Linux >= 2a5193119269062608582418deba7af82844159a < 99d2e850c643e2c70fa165b722a1ad28347a8b3a`
- `Linux >= 2a5193119269062608582418deba7af82844159a < c6659f66d4ee4841aafae5659d2ef5e4c5c63cb6`
- `Linux 2.6.30`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.