CVE-2026-68449

A flaw was found in the Linux kernel's sata_dwc_460ex component. A hand-rolled bit-scanning loop in the NCQ tag completion path contains an infinite loop bug. When a specific tag_mask value is processed, the loop can overflow, causing an infinite loop in a hard interrupt request (hardirq) context while a spinlock is held. This can lead to a system hang or crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires access to systems equipped with specific Synopsys DesignWare SATA hardware controllers and leads to a local denial of service without compromising data confidentiality or integrity. On standard enterprise deployments, the sata_dwc_460ex driver is rarely engaged outside specialized embedded architecture configurations. An attacker capable of inducing the specific NCQ tag conditions can trigger an unrecoverable hardirq loop with a held spinlock, forcing a system stall that necessitates a reboot.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.