ROS-20261012-73-0062

The vulnerability of the mctpi2crecv function in the drivers/net/mctp/mctp-i2c.c module of the MCTP serial transport driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...

SUSE CVE-2026-68124

In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receive state machine reads a frame length byte in mctpserialpushheader case 2 and validates it upper-bound-only: if c MCTPSERIALFRAMEMTU...

CVE-2026-68124

A flaw was found in the Linux kernel's Message Control Transport Protocol MCTP serial driver. The driver's receive state machine incorrectly handles zero-length frames, leading to an out-of-bounds write. A local attacker with CAPNETADMIN capabilities can exploit this vulnerability by sending...

CVE-2026-68124

In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receive state machine reads a frame length byte in mctpserialpushheader case 2 and validates it upper-bound-only: if c MCTPSERIALFRAMEMTU...

UBUNTU-CVE-2026-68124

In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receive state machine reads a frame length byte in mctpserialpushheader case 2 and validates it upper-bound-only: if c MCTPSERIALFRAMEMTU...

CVE-2026-68124 mctp: serial: handle zero-length frames to prevent rx buffer overflow

In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receive state machine reads a frame length byte in mctpserialpushheader case 2 and validates it upper-bound-only: if c MCTPSERIALFRAMEMTU...

CVE-2026-68124

CVE-2026-68124 affects the Linux kernel MCTP serial driver. A zero-length frame could cause an out-of-bounds write in the receive path when rxlen == 0, requiring CAP_NET_ADMIN to attach the MCTP line discipline and bring up the netdev. The fix routes zero-length frames to STATE_TRAILER (instead o...

EUVD-2026-55505

In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receive state machine reads a frame length byte in mctpserialpushheader case 2 and validates it upper-bound-only: if c MCTPSERIALFRAMEMTU...

CVE-2026-68124 mctp: serial: handle zero-length frames to prevent rx buffer overflow

In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receive state machine reads a frame length byte in mctpserialpushheader case 2 and validates it upper-bound-only: if c MCTPSERIALFRAMEMTU...

Linux Distros Unpatched Vulnerability : CVE-2026-68124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receiv...

PT-2026-69524

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds heap write exists in the MCTP serial receive state machine. The issue occurs in the mctp serial push header function when a frame length byte of zero is processed. Becau...