CVE-2026-68297

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Transparent Inter-Process Communication (TIPC) implementation where the TIPC NL MEDIA SET and TIPC NL BEARER SET endpoints fail to enforce a maximum bound on user-supplied Maximum Transmission Unit (MTU) values. When an MTU value exceeding 65535 is provided, it is silently truncated when assigned to the l->mtu and l->advertised mtu variables in the tipc link create() function. Specifically, a value of 65536 truncates to 0, leading to a division by zero error in the tipc link set queue limits() function. Other overflowing values result in incorrect MTU settings, causing link malfunctions. This can be triggered by an unprivileged user via a user namespace through the tipc udp mtu bad() function called from tipc nl media set() or an inline check in tipc nl bearer set().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.