SB20261007127 - Infinite loop in Linux kernel net wwan driver
Published: October 7, 2026
Security Bulletin ID
SB20261007127
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Infinite loop (CVE-ID: CVE-2026-98237)
CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to an infinite loop caused by unchecked cyclic NDP chains in mhi_mbim_rx() when processing modem-supplied NTBs. A local user can supply a crafted NTB containing an NDP that points to itself or an earlier NDP to cause a denial of service.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/19b5e8dd884a530d04482e1a8e547f43cad17ed7
- https://git.kernel.org/stable/c/24ade82d6d993274e99c2c6998848751c35292e7
- https://git.kernel.org/stable/c/3ed36ee1b29b028f6bc2ebe100152f61a33df05a
- https://git.kernel.org/stable/c/5d063822ac5184939c1ed377a339a01d8ae814e8
- https://git.kernel.org/stable/c/829fec45122da58d77a55a3b7ca514dafab98e77
- https://git.kernel.org/stable/c/8dad70ff7e25cbcfbcb5101fdbf36d98003eb653
- https://git.kernel.org/stable/c/e4b2c7b50d4f4aa1ddfff731b136d65f65b2b526