CVE-2026-68143: net: slip: serialize receive against buffer reallocation
In the Linux kernel, the following vulnerability has been resolved:
net: slip: serialize receive against buffer reallocation
slreallocbufs() replaces rbuff and updates buffsize while holding sl->lock. slipreceivebuf() reads those fields and writes through rbuff without holding the lock.
An MTU change can therefore race with receive processing. An MTU shrink can expose the new smaller rbuff with the old larger bound, causing an out-of-bounds write. A receive callback which already loaded the old rbuff can instead continue writing after that buffer has been freed.
Serialize receive processing with slreallocbufs() by holding sl->lock while consuming each receive batch.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68143?
CVE-2026-68143 has a risk rating of 57, indicating a moderate severity level.
How do I fix CVE-2026-68143?
To fix CVE-2026-68143, you should update to the latest kernel version where the vulnerability has been resolved.
What systems are affected by CVE-2026-68143?
CVE-2026-68143 affects systems running vulnerable versions of the Linux kernel with the slip driver implemented.
What are the potential impacts of CVE-2026-68143?
The potential impacts of CVE-2026-68143 include possible data corruption or other malicious activities due to unsynchronized buffer access.
Is there a workaround for CVE-2026-68143?
A workaround for CVE-2026-68143 may involve disabling the slip driver until the kernel can be updated.