CVE-2026-74282

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Transparent Inter-Process Communication (TIPC) protocol where the tipc sk conn proto rcv() function subtracts a peer-supplied connection acknowledgment count from the snt unacked unsigned 16-bit send counter without verifying if the count exceeds the number of outstanding messages. When a CONN MANAGER/CONN ACK message contains an acknowledgment count larger than snt unacked, the subtraction results in an integer underflow, causing the value to wrap to a near-maximum number. This state keeps tsk conn cong() permanently true, which starves the connection of further transmissions and allows a peer to wedge the send side of the connection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.