CVE-2026-68313

In the Linux kernel, the following vulnerability has been resolved: tipc: fix infinite loop in __tipc_nl_compat_dumpit cmd->dumpit callback can return a negative errno, causing an infinite loop due to the while(len) condition. As the loop never terminates, genl_mutex is never released, and other tasks waiting on it starve in D state. Check dumpit's return value, propagate it and jump to err_out on error.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/1ab78af2140189b735b8d3b889b0284128cb2013
https://git.kernel.org/stable/c/22f8aa35964e8f2ab026578f45befc9605fd1b28
https://git.kernel.org/stable/c/2a1c1397275f27e33b6a2a565d81cfef0deb6656
https://git.kernel.org/stable/c/98d09766cee3182aae292886e2fef0cbe8dba537
https://git.kernel.org/stable/c/9cd8c88e1336ec0fbe02af1ddf2b52838d30fae4
https://git.kernel.org/stable/c/b8f3b8efa5f99081b14de1a7ffa68a81bf01bd48
https://git.kernel.org/stable/c/e740e90ca8e7f70d9eac1aa31a8b3e0e4d32b2ef
https://git.kernel.org/stable/c/f9c669d9f4cac832fe31193cdbc24c6a9d99398b

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-10 13:20

Updated : 2026-08-19 17:20

NVD link : CVE-2026-68313

Mitre link : CVE-2026-68313

CVE.ORG link : CVE-2026-68313

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-68313", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "d0796d1ef63deb38147729664691ba3090930b26", "lessThan": "2a1c1397275f27e33b6a2a565d81cfef0deb6656", "versionType": "git"}, {"status": "affected", "version": "d0796d1ef63deb38147729664691ba3090930b26", "lessThan": "98d09766cee3182aae292886e2fef0cbe8dba537", "versionType": "git"}, {"status": "affected", "version": "d0796d1ef63deb38147729664691ba3090930b26", "lessThan": "9cd8c88e1336ec0fbe02af1ddf2b52838d30fae4", "versionType": "git"}, {"status": "affected", "version": "d0796d1ef63deb38147729664691ba3090930b26", "lessThan": "f9c669d9f4cac832fe31193cdbc24c6a9d99398b", "versionType": "git"}, {"status": "affected", "version": "d0796d1ef63deb38147729664691ba3090930b26", "lessThan": "1ab78af2140189b735b8d3b889b0284128cb2013", "versionType": "git"}, {"status": "affected", "version": "d0796d1ef63deb38147729664691ba3090930b26", "lessThan": "e740e90ca8e7f70d9eac1aa31a8b3e0e4d32b2ef", "versionType": "git"}, {"status": "affected", "version": "d0796d1ef63deb38147729664691ba3090930b26", "lessThan": "b8f3b8efa5f99081b14de1a7ffa68a81bf01bd48", "versionType": "git"}, {"status": "affected", "version": "d0796d1ef63deb38147729664691ba3090930b26", "lessThan": "22f8aa35964e8f2ab026578f45befc9605fd1b28", "versionType": "git"}], "programFiles": ["net/tipc/netlink_compat.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.0"}, {"status": "unaffected", "version": "0", "lessThan": "4.0", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.265", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.216", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.183", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.148", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.101", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.42", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.6", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["net/tipc/netlink_compat.c"], "defaultStatus": "affected"}]}], "published": "2026-08-10T13:20:21.177", "references": [{"url": "https://git.kernel.org/stable/c/1ab78af2140189b735b8d3b889b0284128cb2013", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/22f8aa35964e8f2ab026578f45befc9605fd1b28", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/2a1c1397275f27e33b6a2a565d81cfef0deb6656", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/98d09766cee3182aae292886e2fef0cbe8dba537", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/9cd8c88e1336ec0fbe02af1ddf2b52838d30fae4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b8f3b8efa5f99081b14de1a7ffa68a81bf01bd48", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e740e90ca8e7f70d9eac1aa31a8b3e0e4d32b2ef", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f9c669d9f4cac832fe31193cdbc24c6a9d99398b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix infinite loop in __tipc_nl_compat_dumpit\n\ncmd->dumpit callback can return a negative errno, causing an infinite\nloop due to the while(len) condition. As the loop never terminates,\ngenl_mutex is never released, and other tasks waiting on it starve in D\nstate.\n\nCheck dumpit's return value, propagate it and jump to err_out on error."}], "lastModified": "2026-08-19T17:20:41.973", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}