SB20260812175 - Improper handling of exceptional conditions in Linux kernel firewire driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper handling of exceptional conditions (CVE-ID: CVE-2026-68354)

CWE-ID: CWE-755 - Improper Handling of Exceptional Conditions

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to improper handling of fragment list boundaries in the firewire networking fragmented datagram reassembly logic when processing fragmented datagrams. A remote attacker can send specially crafted fragmented datagrams to cause a denial of service.

The issue can prevent complete datagrams from being correctly recognized during reassembly.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/0177e578d7a885037b0fb82286c12e9d0360cc10
• https://git.kernel.org/stable/c/22e05b8ddbcf7d22c7f1598786e86635547e554d
• https://git.kernel.org/stable/c/2a5aa4e9b89227d1a1690fb8d5b81e5f3b261999
• https://git.kernel.org/stable/c/b7d633c7c92321be98724b1d365e8ce507f2f349
• https://git.kernel.org/stable/c/d52a13adbb8ccbab99cd3bad36804e87d8b5c052