CVE-2026-68368

A flaw was found in the Linux kernel's USB gadget NCM (Network Control Model) driver. This vulnerability occurs because the driver fails to properly validate the boundaries of datagrams and Network Transfer Blocks (NTBs) supplied by a USB host. A malicious USB host can exploit this by crafting specific datagram offsets and lengths, causing the kernel to copy adjacent kernel memory into network buffers. This can lead to information disclosure from the kernel's memory.

This flaw is rated as a Moderate severity impact because exploitation requires the system to be explicitly configured to operate as a USB peripheral gadget and directly attached to a hostile host machine. Standard enterprise installations of Red Hat Enterprise Linux act as USB hosts rather than peripheral devices, meaning USB gadget functions are not active or loaded by default. The risk is primarily confined to specialized environments, such as embedded or automotive platforms running Red Hat In-Vehicle OS, where USB gadget networking is intentionally enabled and exposed to untrusted hosts.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.