CVE-2026-72298

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A 32-bit integer overflow exists in the qrtr endpoint post() function. The issue occurs during the validation of incoming packets where the size variable, received from the wire, is processed. On 32-bit systems, if size is greater than or equal to 0xfffffffd, the ALIGN(size, 4) operation wraps to 0. This allows the validation check to pass, leading to a situation where skb put data() writes beyond the hdrlen-sized socket buffer (skb), resulting in a kernel oops. This issue specifically affects 32-bit architectures; 64-bit systems are not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.