CVE-2026-68455

A flaw was found in the Linux kernel's liveupdate component. This vulnerability arises from insufficient validation of session types during ioctl operations. A local user can exploit this by attempting an ioctl operation intended for an incoming session on an outgoing session. This improper handling can lead to unexpected errors in file handlers and trigger numerous kernel warnings, potentially causing system instability and a denial of service.

This vulnerability is rated as having Moderate impact because exploitation is constrained to authenticated local users who can trigger specific ioctl calls, restricting the potential impact to a local denial of service via kernel warnings or faults. Red Hat Enterprise Linux releases are not affected as the upstream liveupdate subsystem is not included in supported kernel builds.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.