CVE-2026-68354: firewire: net: Fix fragmented datagram reassembly
firewire: net: Fix fragmented datagram reassembly
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.150.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68354?
CVE-2026-68354 has a severity score of 23, indicating a significant risk to affected systems.
How do I fix CVE-2026-68354?
To remediate CVE-2026-68354, update the Linux kernel to the latest version that includes the fix for this vulnerability.
What systems are affected by CVE-2026-68354?
CVE-2026-68354 affects the Linux kernel implementations that utilize the FireWire networking feature.
What are the implications of CVE-2026-68354?
CVE-2026-68354 can lead to potential denial of service attacks due to improper handling of fragmented datagram reassembly.
What components are involved in CVE-2026-68354?
CVE-2026-68354 specifically involves the fwnet_frag_new() function within the Linux kernel's FireWire networking implementation.