CVE-2026-68287

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drop monitor component where size calculations for 64-bit attributes are incorrect. The functions net dm packet report fill() and net dm hw packet report fill() use nla put u64 64bit() to append the NET DM ATTR PC and NET DM ATTR TIMESTAMP attributes. On 32-bit architectures lacking CONFIG HAVE EFFICIENT UNALIGNED ACCESS, a 4-byte NET DM ATTR PAD attribute may be added for alignment. Because net dm packet report size() and net dm hw packet report size() used nla total size(sizeof(u64)) instead of nla total size 64bit(sizeof(u64)), the system budgeted 12 bytes instead of the required 16 bytes. This under-estimation of the Socket Buffer (SKB) size can trigger an skb over panic() when nla reserve() or skb put() is called.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.