CVE-2026-68368

The CVE concerns the Linux kernel USB gadget driver f_ncm (ncm_unwrap_ntb). The issue: when unpacking host-supplied NTBs, the code checked datagram length against frame_max but did not ensure the datagram fits within the declared block length, and subsequent NTBs from a single socket buffer were ...