In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv()… (CVE-2026-68439)
A vulnerability in the Linux kernel's mt76 wifi driver (specifically mt7925) involved a possible NULL-pointer dereference in the mt7925_mcu_bss_he_tlv() function. This issue was due to the mt76_connac_get_he_phy_cap routine potentially returning NULL without proper checking before dereferencing. The vulnerability has been resolved by adding a check for the cap pointer before dereferencing it.
AI Analysis
Technical Summary
The Linux kernel mt76 wifi driver for the mt7925 chipset had a flaw where the mt76_connac_get_he_phy_cap function could return a NULL pointer. The vulnerable function mt7925_mcu_bss_he_tlv did not verify this pointer before dereferencing it, leading to a possible NULL-pointer dereference vulnerability. This issue has been fixed by adding a check to ensure the pointer is not NULL before use.
Potential Impact
A NULL-pointer dereference in kernel code can lead to a denial of service (system crash) or potentially other stability issues. There is no indication of code execution or privilege escalation from this vulnerability. No known exploits are reported in the wild.
Mitigation Recommendations
A fix has been applied in the Linux kernel source to check the pointer before dereferencing, resolving the vulnerability. Users should update their Linux kernel to a version that includes this fix. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisory for the exact fixed version and update accordingly.
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv()… (CVE-2026-68439)
Description
A vulnerability in the Linux kernel's mt76 wifi driver (specifically mt7925) involved a possible NULL-pointer dereference in the mt7925_mcu_bss_he_tlv() function. This issue was due to the mt76_connac_get_he_phy_cap routine potentially returning NULL without proper checking before dereferencing. The vulnerability has been resolved by adding a check for the cap pointer before dereferencing it.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel mt76 wifi driver for the mt7925 chipset had a flaw where the mt76_connac_get_he_phy_cap function could return a NULL pointer. The vulnerable function mt7925_mcu_bss_he_tlv did not verify this pointer before dereferencing it, leading to a possible NULL-pointer dereference vulnerability. This issue has been fixed by adding a check to ensure the pointer is not NULL before use.
Potential Impact
A NULL-pointer dereference in kernel code can lead to a denial of service (system crash) or potentially other stability issues. There is no indication of code execution or privilege escalation from this vulnerability. No known exploits are reported in the wild.
Mitigation Recommendations
A fix has been applied in the Linux kernel source to check the pointer before dereferencing, resolving the vulnerability. Users should update their Linux kernel to a version that includes this fix. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisory for the exact fixed version and update accordingly.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-wfqw-w2wc-4gmv
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-68439"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a7c9b69bf8831d539cdf6d0
Added to database: 08/12/2026, 16:12:25 UTC
Last enriched: 08/12/2026, 17:19:09 UTC
Last updated: 08/13/2026, 00:41:14 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.