CVE-2026-68313

In the Linux kernel, the following vulnerability has been resolved: tipc: fix infinite loop in tipcnlcompatdumpit cmd-dumpit callback can return a negative errno, causing an infinite loop due to the whilelen condition. As the loop never terminates, genlmutex is never released, and other tasks...

PT-2026-69713

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop exists in the tipc nl compat dumpit function. This occurs because the cmd-dumpit callback can return a negative error number, which prevents the whilelen condition from...

UBUNTU-CVE-2026-64563

In the Linux kernel, the following vulnerability has been resolved: rhashtable: clear stale iter-p on table restart rhashtablewalkstartcheck has two restart paths when resuming a walk. When iter-walker.tbl is valid, it re-validates iter-p against the table and sets iter-p = NULL if the object is...

PT-2025-18579

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel related to the tipc nl compat name table dump header function. The issue was caused by a missing type cast of sizeof.. to int, which...

kernel: improper input validation in tipc_nl_retrieve_key function in net/tipc/node.c

A flaw buffer overflow in the Linux kernel TIPC protocol functionality was found in the way user uses protocol with encryption enabled. A local user could use this flaw to crash the system...

DEBIAN-CVE-2021-29646

An issue was discovered in the Linux kernel before 5.11.11. tipcnlretrievekey in net/tipc/node.c does not properly validate certain data sizes, aka CID-0217ed2848e8...

UBUNTU-CVE-2021-29646

An issue was discovered in the Linux kernel before 5.11.11. tipcnlretrievekey in net/tipc/node.c does not properly validate certain data sizes, aka CID-0217ed2848e8...

PT-2016-6185

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.7 Description The issue is related to the tipc nl publ dump function in the Linux kernel, which does not verify socket existence. This allows local users to cause a denial of service, resulting in a NULL pointe...