CVE-2026-68297

A flaw was found in the Linux kernel's TIPC (Transparent Inter-Process Communication) module. A local user can exploit this vulnerability by providing a crafted Maximum Transmission Unit (MTU) value that exceeds the expected limit. This can lead to a division-by-zero error, causing a system crash and resulting in a denial of service. Incorrect MTU values can also lead to network link malfunctions.

Red Hat has evaluated this vulnerability as a Moderate severity issue because it is restricted to local access and results in a denial of service without compromising confidentiality or integrity. Exploiting the flaw requires the TIPC networking module to be actively loaded and configured, which is not enabled by default in standard Red Hat Enterprise Linux installations. Systems remain unaffected unless local administrative capabilities or unprivileged user namespaces are leveraged to initialize and configure the protocol.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.