DEBIAN-CVE-2026-68294

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: restrict socket creation to the initial network namespace QRTR keeps its entire port and node state in module-global variables that are not partitioned per network namespace: qrtrlocalnid is a single global node id...

CVE-2026-68294

The CVE CVE-2026-68294 affects the Linux kernel QRTR transport (AF_QIPCRTR) by not isolating its global state per network namespace. qrtr_local_nid and qrtr_ports are shared globally and lack namespace checks; qrtr_create() does not restrict the namespace for new sockets. This enables an unprivil...