SB20260812243 - Incorrect Calculation of Buffer Size in Linux kernel core

Description

This security bulletin contains information about 1 vulnerability.

1) Incorrect Calculation of Buffer Size (CVE-ID: CVE-2026-68287)

CWE-ID: CWE-131 - Incorrect Calculation of Buffer Size

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper calculation of buffer size in net/core/drop_monitor.c when handling 64-bit drop monitor attributes on affected architectures. A local user can trigger packet report generation to cause a denial of service.

This affects 32-bit architectures without CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS because 64-bit netlink attributes may require additional padding for alignment.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/4a9e30764e80693bcf875c776170edce20f94fe0
• https://git.kernel.org/stable/c/7089f7ab99c89f443c92d8fcc585e63f2727f0b3