CVE-2026-68187: exec: fix unsigned loop counter wrap in transfer_args_to_stack()
exec: fix unsigned loop counter wrap in transferargstostack()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.150.1-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 7e7ec6a93434 - Compensating control
For systems built with `CONFIG_MMU=n` where `transfer_args_to_stack()` is used (e.g., binfmt_flat and binfmt_elf_fdpic on nommu), mitigate by limiting exec of affected flat/elf-fdpic binaries until the fix is applied (to reduce likelihood of triggering the panic via the argument/environment stack copy).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68187?
CVE-2026-68187 has a risk level of 50, indicating a moderate severity.
How do I fix CVE-2026-68187?
To fix CVE-2026-68187, update your Linux kernel to the latest patched version that addresses this vulnerability.
What impact does CVE-2026-68187 have on my system?
CVE-2026-68187 can potentially lead to unintended behavior in the loop counter, risking system stability or security.
Is CVE-2026-68187 present in older versions of the Linux kernel?
Yes, CVE-2026-68187 affects several older versions of the Linux kernel prior to the fix release.
Can CVE-2026-68187 be exploited remotely?
The details of CVE-2026-68187 suggest it may not be directly exploitable remotely but poses risks in certain circumstances.