CVE-2026-68289

A flaw was found in the Linux kernel. An integer overflow vulnerability exists within the Transparent Inter-Process Communication (TIPC) subsystem, specifically in the tipc_recvmsg() and tipc_recvstream() functions. This issue occurs when a buffer length value exceeds the maximum integer size, leading to a negative copy length. A local attacker could exploit this flaw to trigger a kernel panic, resulting in a Denial of Service (DoS) for the system.

This vulnerability is rated as Moderate impact because exploitation requires local access and the Transparent Inter-Process Communication (TIPC) kernel module is not loaded by default on Red Hat Enterprise Linux. An unprivileged local user could potentially cause a denial of service by triggering a kernel crash when receiving data over TIPC sockets with oversized buffer lengths. Standard deployments that do not explicitly enable or configure TIPC networking are not exposed to this risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.