{"id":"CVE-2026-68313","title":"tipc: fix infinite loop in __tipc_nl_compat_dumpit","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix infinite loop in __tipc_nl_compat_dumpit\n\ncmd->dumpit callback can return a negative errno, causing an infinite\nloop due to the while(len) condition. As the l…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= d0796d1ef63deb38147729664691ba3090930b26 < 2a1c1397275f27e33b6a2a565d81cfef0deb6656","Linux >= d0796d1ef63deb38147729664691ba3090930b26 < 98d09766cee3182aae292886e2fef0cbe8dba537","Linux >= d0796d1ef63deb38147729664691ba3090930b26 < 9cd8c88e1336ec0fbe02af1ddf2b52838d30fae4","Linux >= d0796d1ef63deb38147729664691ba3090930b26 < f9c669d9f4cac832fe31193cdbc24c6a9d99398b","Linux >= d0796d1ef63deb38147729664691ba3090930b26 < 1ab78af2140189b735b8d3b889b0284128cb2013","Linux >= d0796d1ef63deb38147729664691ba3090930b26 < e740e90ca8e7f70d9eac1aa31a8b3e0e4d32b2ef","Linux >= d0796d1ef63deb38147729664691ba3090930b26 < b8f3b8efa5f99081b14de1a7ffa68a81bf01bd48","Linux >= d0796d1ef63deb38147729664691ba3090930b26 < 22f8aa35964e8f2ab026578f45befc9605fd1b28","Linux 4.0"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:47:04.642186Z"},"published":"2026-08-10","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:55:12.855Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-68313","references":[{"url":"https://git.kernel.org/stable/c/2a1c1397275f27e33b6a2a565d81cfef0deb6656"},{"url":"https://git.kernel.org/stable/c/98d09766cee3182aae292886e2fef0cbe8dba537"},{"url":"https://git.kernel.org/stable/c/9cd8c88e1336ec0fbe02af1ddf2b52838d30fae4"},{"url":"https://git.kernel.org/stable/c/f9c669d9f4cac832fe31193cdbc24c6a9d99398b"},{"url":"https://git.kernel.org/stable/c/1ab78af2140189b735b8d3b889b0284128cb2013"},{"url":"https://git.kernel.org/stable/c/e740e90ca8e7f70d9eac1aa31a8b3e0e4d32b2ef"},{"url":"https://git.kernel.org/stable/c/b8f3b8efa5f99081b14de1a7ffa68a81bf01bd48"},{"url":"https://git.kernel.org/stable/c/22f8aa35964e8f2ab026578f45befc9605fd1b28"}],"tags":["cve.org"],"epss":0.00216,"epssPercentile":0.12162,"ingestedAt":"2026-11-06T18:00:12.613Z","slug":"CVE-2026-68313","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix infinite loop in __tipc_nl_compat_dumpit\n\ncmd->dumpit callback can return a negative errno, causing an infinite\nloop due to the while(len) condition. As the loop never terminates,\ngenl_mutex is never released, and other tasks waiting on it starve in D\nstate.\n\nCheck dumpit's return value, propagate it and jump to err_out on error.\n\n## Affected\n\n- `Linux >= d0796d1ef63deb38147729664691ba3090930b26 < 2a1c1397275f27e33b6a2a565d81cfef0deb6656`\n- `Linux >= d0796d1ef63deb38147729664691ba3090930b26 < 98d09766cee3182aae292886e2fef0cbe8dba537`\n- `Linux >= d0796d1ef63deb38147729664691ba3090930b26 < 9cd8c88e1336ec0fbe02af1ddf2b52838d30fae4`\n- `Linux >= d0796d1ef63deb38147729664691ba3090930b26 < f9c669d9f4cac832fe31193cdbc24c6a9d99398b`\n- `Linux >= d0796d1ef63deb38147729664691ba3090930b26 < 1ab78af2140189b735b8d3b889b0284128cb2013`\n- `Linux >= d0796d1ef63deb38147729664691ba3090930b26 < e740e90ca8e7f70d9eac1aa31a8b3e0e4d32b2ef`\n- `Linux >= d0796d1ef63deb38147729664691ba3090930b26 < b8f3b8efa5f99081b14de1a7ffa68a81bf01bd48`\n- `Linux >= d0796d1ef63deb38147729664691ba3090930b26 < 22f8aa35964e8f2ab026578f45befc9605fd1b28`\n- `Linux 4.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}