CVE-2026-68354

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the firewire network component during fragmented datagram reassembly. The fwnet frag new() function maintains a sorted list of received fragments for partial datagrams. When processing a new fragment adjacent to an existing one, the system incorrectly assumes that a neighboring fragment always exists, failing to account for instances where the next or previous entry is the list head rather than a struct fwnet fragment info. Additionally, gap checks are performed against the old edge of the current fragment instead of the edge after the new fragment is added. This can result in adjacent ranges remaining unmerged, causing the fwnet pd is complete() function to fail in detecting a complete datagram.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.