AUGUST 18, 2026
Live Feed
Back to database
Case File

CVE-2026-68449

UNKNOWN · CVSS N/A EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-08-12 · Last synced 2026-08-17

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's SATA driver, specifically in the NCQ tag completion process, where a flawed bit-scanning loop can lead to an infinite loop under certain conditions. This can result in a denial of service due to the spinlock being held indefinitely, impacting system stability. Organizations using affected Linux kernel versions, particularly those relying on SATA devices, should prioritize applying the fix to mitigate potential disruptions.

CVE
CVE-2026-68449
Severity
UNKNOWN
CVSS
N/A
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning The hand-rolled bit-scanning loop in the NCQ completion path has an infinite loop bug. When tag_mask has only high bits set (e.g. 0x80000000), the inner while loop left-shifts tag_mask until it overflows to 0. At that point !(0 & 1) is always true and 0 <<= 1 stays 0, causing an infinite loop in hardirq context with a spinlock held. Replace the open-coded bit-scanning with __ffs() which correctly finds the least significant set bit and is bounded by the width of the argument.