CVE-2026-68289

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An integer overflow exists in the tipc recvmsg() and tipc recvstream() functions. The issue occurs because the min t(int, ...) macro casts the buflen variable, which is of type size t, to an int. If buflen exceeds INT MAX, it wraps to a negative value and is selected as the minimum. This negative value is then passed to simple copy to iter(), where it is promoted to SIZE MAX, potentially triggering a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.