CVE-2026-72298

A flaw was found in the Linux kernel's qrtr network component. On 32-bit systems, a 32-bit integer overflow can occur in the qrtr_endpoint_post() function when processing an incoming packet. This overflow can bypass a size validation check, leading to an out-of-bounds write and causing the kernel to crash. This vulnerability could allow a local attacker to cause a Denial of Service (DoS).

This vulnerability is rated as an Important severity impact because a local user can induce an integer calculation overflow during QRTR packet processing, leading to out-of-bounds kernel memory corruption and a system crash. The flaw specifically targets 32-bit architectures utilizing the Qualcomm IPC Router network protocol, leaving 64-bit enterprise environments unaffected by this memory corruption. In addition, the affected driver is not loaded by default on standard server installations and requires specialized hardware or explicit socket creation to be initialized.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, prevent the Qualcomm IPC Router kernel module from loading:

1. Create a configuration file in /etc/modprobe.d to disable and blacklist the module:

echo "install qrtr /bin/true" > /etc/modprobe.d/disable-qrtr.conf

echo "blacklist qrtr" >> /etc/modprobe.d/disable-qrtr.conf

2. If the module is already loaded, attempt to unload it:

modprobe -r qrtr

Warning and Caveats: Disabling or unloading the qrtr module will prevent Qualcomm IPC Router network communication and will disable features or hardware that rely on this protocol (such as Qualcomm modem devices or SoC communication channels). If the module is actively in use by running system processes or hardware interfaces, unloading it will fail, and a system reboot will be required for the configuration to take effect.