CVE-2026-68143

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the SLIP (Serial Line IP) implementation when handling MTU (Maximum Transmission Unit) changes. The function sl realloc bufs() updates the rbuff and buffsize while holding the sl->lock, but slip receive buf() accesses these fields without the lock. If the MTU is reduced, it can lead to an out-of-bounds write because the system may use a new smaller rbuff with an old larger bound. Additionally, a receive callback might continue writing to a buffer after it has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.