AUGUST 22, 2026
Live Feed
Back to database
Case File

CVE-2026-68313

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the TIPC (Transparent Inter-Process Communication) subsystem, where a negative return value from the cmd->dumpit callback can lead to an infinite loop, causing the genl_mutex to remain locked. This results in starvation of other tasks waiting for the mutex, potentially leading to system instability or denial of service. Linux system administrators and developers utilizing TIPC should prioritize applying the fix to mitigate these risks.

CVE
CVE-2026-68313
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: tipc: fix infinite loop in __tipc_nl_compat_dumpit cmd->dumpit callback can return a negative errno, causing an infinite loop due to the while(len) condition. As the loop never terminates, genl_mutex is never released, and other tasks waiting on it starve in D state. Check dumpit's return value, propagate it and jump to err_out on error.