目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CVE-2026-68469— Linux kernel 安全漏洞

一分钟漏洞结论

影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel 3.0版本存在安全漏洞，该漏洞源于mwifiex驱动在处理关联命令响应时无条件将ps_state设置为PS_STATE_AWAKE，导致电源管理流程中的睡眠确认无法发送，可能造成永久忙扫描，使用户空间扫描请求失败。

AI 预测 5.3 利用难度: 中等 EPSS 0.21% · P12

可能的 ATT&CK 技术 1 AI

T1499 · Endpoint Denial of Service

影响版本矩阵 18

厂商产品 版本范围状态
Linux Linux 5e6e3a92b9a4c9416b17f468fa5c7fa2233b8b4e< 2ed36b2586f16c480ed58de303af704c2235e16d affected
5e6e3a92b9a4c9416b17f468fa5c7fa2233b8b4e< 5796eabe435d83544b6fe39851ce47ca68fdb778 affected
5e6e3a92b9a4c9416b17f468fa5c7fa2233b8b4e< 31a2c409f8f58d20f0f6391c151421155768ed77 affected
5e6e3a92b9a4c9416b17f468fa5c7fa2233b8b4e< deb5f0ae384f1cf41fccaf6375266db2f2911b2b affected
5e6e3a92b9a4c9416b17f468fa5c7fa2233b8b4e< 1bc55db2d34756bd53e4460dbb699619ee13cd7f affected
5e6e3a92b9a4c9416b17f468fa5c7fa2233b8b4e< a59cfa165aee3e29d06145041c0ebe46a51de604 affected
5e6e3a92b9a4c9416b17f468fa5c7fa2233b8b4e< 6126e12bf8c87badeab41a164c9689ac88e5c160 affected
5e6e3a92b9a4c9416b17f468fa5c7fa2233b8b4e< d78a407bad6f500884a8606aea1a5a9207be4030 affected
… +10 条更多
获取后续新漏洞提醒 登录后订阅

一、 漏洞 CVE-2026-68469 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
wifi: mwifiex: fix permanently busy scans after multiple roam iterations
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix permanently busy scans after multiple roam iterations In order for the firmware to sleep, the driver has to confirm a previously received sleep request. The normal sequence of evets goes like this: EVENT_SLEEP -> adapter->ps_state = PS_STATE_PRE_SLEEP -> sleep-confirm -> SLEEP -> EVENT_AWAKE -> AWAKE. Before sending the sleep-confirm command, the driver must make sure there are no commands either running or waiting to be completed. mwifiex_ret_802_11_associate() unconditionally sets ps_state = PS_STATE_AWAKE when it processes the association command response, outside of the normal powersave management flow. If EVENT_SLEEP arrives while the association command is in flight, ps_state is PRE_SLEEP when the association command response is parsed, and the forced AWAKE overwrites it. The deferred sleep-confirm is never sent. A subsequent scan_start command is correctly acknowledged, but the firmware doesn't generate scan_result events. The scan request never finishes, and additional requests from userspace fail with -EBUSY. After testing on both IW412 and W8997, I could only trigger the bug on the IW412 and observed the firmwares behave differently. On the IW412 the firmware still sends EVENT_SLEEP while the authentication / association process is ongoing. A W8997 under the same conditions seems to suppress power-save for the duration of the association, so PRE_SLEEP never coincided with the association response even after extended periods of testing using the loops described below (>12hours). On the IW412, the delay between commands that triggers an EVENT_SLEEP was empirically determined to be ~20ms. This delay can naturally occur when the driver is outputting debugging information (debug_mask = 0x00000037), in which situation the busy scans issue is repeatable while running "test 1)" as described below. If the delay between commands is less than ~20ms, the firmware stays awake and the issue was not reproducible running the same test. The host_mlme=false path also behaves differently. In this case, the entire authentication / association transaction is executed by one command (HostCmd_CMD_802_11_ASSOCIATE), and the firmware doesn't emit EVENT_SLEEP while the command is running. Remove the assignment so the ps_state is only manipulated in the paths that are related to powersave event handling and on the main workqueue for correct sleep confirmation. The following loop tests were performed (with debugging output enabled): 1) force roaming between two AP's, one 5GHz and one 2.4GHz, same SSID. Use wpa_cli to trigger the roaming behavior, sleep 2s between iterations. 2) force a disconnection to AP 1 and a connection to AP 2, test scan. Use wpa_cli to trigger the connection changes, sleep 2s between iterations. Each test ran in each device for at least 3 hours.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel 3.0版本存在安全漏洞，该漏洞源于mwifiex驱动在处理关联命令响应时无条件将ps_state设置为PS_STATE_AWAKE，导致电源管理流程中的睡眠确认无法发送，可能造成永久忙扫描，使用户空间扫描请求失败。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商 产品 影响版本 CPE 订阅
Linux Linux 5e6e3a92b9a4c9416b17f468fa5c7fa2233b8b4e ~ 2ed36b2586f16c480ed58de303af704c2235e16d -
Linux Linux 3.0 -

二、漏洞 CVE-2026-68469 的公开POC

# POC 描述 源链接 神龙链接
AI 生成 POC 高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2026-68469 的情报信息

请登录查看更多情报信息。

CVE-2026-68469 补丁与修复 (8)

同批安全公告 · Linux · 2026-08-15 · 共 845 条

CVE-2026-74475 10.0 CRITICAL Linux kernel 安全漏洞
CVE-2026-72408 10.0 CRITICAL Linux kernel 安全漏洞
CVE-2026-74309 10.0 CRITICAL Linux kernel 安全漏洞
CVE-2026-72407 10.0 CRITICAL Linux kernel 安全漏洞
CVE-2026-74280 10.0 CRITICAL Linux kernel 安全漏洞
CVE-2026-74279 10.0 CRITICAL Linux kernel 安全漏洞
CVE-2026-72421 10.0 CRITICAL Linux kernel 安全漏洞
CVE-2026-72493 9.9 CRITICAL Linux kernel 安全漏洞
CVE-2026-72217 9.8 CRITICAL Linux kernel 安全漏洞
CVE-2026-72491 9.8 CRITICAL Linux kernel 安全漏洞
CVE-2026-72221 9.8 CRITICAL Linux kernel 安全漏洞
CVE-2026-72222 9.8 CRITICAL Linux kernel 安全漏洞
CVE-2026-72220 9.8 CRITICAL Linux kernel 安全漏洞
CVE-2026-72398 9.8 CRITICAL Linux kernel 安全漏洞
CVE-2026-72477 9.8 CRITICAL Linux kernel 安全漏洞
CVE-2026-72466 9.8 CRITICAL Linux kernel 安全漏洞
CVE-2026-72472 9.8 CRITICAL Linux kernel 安全漏洞
CVE-2026-72473 9.8 CRITICAL Linux kernel 安全漏洞
CVE-2026-72399 9.8 CRITICAL Linux kernel 安全漏洞
CVE-2026-74398 9.8 CRITICAL Linux kernel 安全漏洞

显示前 20 条，共 845 条。 查看全部 &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-68469

暂无评论

发表评论