CVE-2026-68368

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the f ncm USB gadget driver where the ncm unwrap ntb() function fails to properly validate datagram bounds when unpacking host-supplied Network Control Model (NCM) packets. Specifically, the function does not verify if a datagram fits within the declared block length or if subsequent block lengths in a single socket buffer exceed the remaining buffer data. A malicious USB host can exploit this by specifying offsets and lengths that point beyond the block or by providing headers with lengths larger than the buffer, causing skb put data() to copy adjacent kernel memory from skb shared info into the network socket buffer (skb).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.