CVE-2026-68354

A flaw was found in the FireWire (IEEE 1394) networking driver in the Linux kernel. The fragmented datagram reassembly logic in fwnet_frag_new() incorrectly handles list edges and merging of adjacent fragments. This can prevent complete datagrams from being recognized, potentially leading to a Denial of Service (DoS) for FireWire network communication.

This issue affects FireWire networking (IEEE 1394). Fragment reassembly in fwnet_frag_new() mishandles adjacent fragment merging. Systems without FireWire are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the firewire_net module from loading. See https://access.redhat.com/solutions/41278 for instructions.