CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit
In the Linux kernel, the following vulnerability has been resolved:
tipc: fix infinite loop in tipcnlcompatdumpit
cmd->dumpit callback can return a negative errno, causing an infinite loop due to the while(len) condition. As the loop never terminates, genlmutex is never released, and other tasks waiting on it starve in D state.
Check dumpit's return value, propagate it and jump to errout on error.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68313?
CVE-2026-68313 has a risk rating of 27, indicating a serious vulnerability in the Linux kernel.
How do I fix CVE-2026-68313?
To fix CVE-2026-68313, update the Linux kernel to the latest patched version that addresses the infinite loop issue.
What impact does CVE-2026-68313 have on system performance?
CVE-2026-68313 can lead to system hangs and decreased performance due to the infinite loop caused by the vulnerability.
Is CVE-2026-68313 remotely exploitable?
CVE-2026-68313 is not classified as remotely exploitable; it requires local access to trigger the infinite loop.
Which Linux kernel versions are affected by CVE-2026-68313?
CVE-2026-68313 affects specific versions of the Linux kernel; please check your kernel version against the latest security advisories for more details.