CVE-2026-68124

Summary (CVE-2026-68124): In the Linux kernel’s MCTP serial path (mctp_serial_tty_receive_buf), a zero-length frame could cause an out-of-bounds heap write when rxlen is 0 and the parser enters STATE_DATA, allowing attacker-controlled writes after CAP_NET_ADMIN attaches the mctpserial netdev. The...