CVE-2026-68179
kernel: misc: nsm: only unlock nsm_dev on post-lock error paths
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · August 10, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's Network Shared Memory (NSM) module. A local attacker can exploit an issue in the nsm_dev_ioctl() function where an incorrect mutex unlock operation is performed. This occurs when an initial data copy fails, leading to an attempt to unlock a mutex that was never acquired. Successful exploitation can result in a kernel panic, causing a denial of service (DoS).
Statement
Red Hat Enterprise Linux is not affected by this vulnerability because the flawed driver implementation is not present in supported kernel versions. In upstream environments, local users could trigger an unbalanced lock release and subsequent system crash through invalid device control requests. Because Red Hat kernels do not package or include the vulnerable code, this issue poses no security risk to supported deployments.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-832 · Unlock of a Resource that is not Locked