CVE-2026-68178
kernel: misc: nsm: pin the module while the device is open
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's NSM (Network Shared Memory) misc device. A local user could exploit this by opening the /dev/nsm device and then unloading the NSM module. This allows a subsequent operation (ioctl) on the open file descriptor to call into memory that has been deallocated, potentially leading to arbitrary code execution or a denial of service.
Statement
This issue affects NSM (Network Security Services) misc device. Module not pinned while /dev/nsm is open, allowing unload UAF. Systems without NSM hardware are not affected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-763 · Release of Invalid Pointer or Reference