CVE-2026-68179
Description
A flaw was found in the Linux kernel's Network Shared Memory (NSM) module. A local attacker can exploit an issue in the nsm_dev_ioctl() function where an incorrect mutex unlock operation is performed. This occurs when an initial data copy fails, leading to an attempt to unlock a mutex that was never acquired. Successful exploitation can result in a kernel panic, causing a denial of service (DoS).
Understanding the Weakness (CWE)
Integrity,Confidentiality,Availability,Other
Technical Impact: DoS: Crash, Exit, or Restart; Execute Unauthorized Code or Commands; Modify Memory; Other
Depending on the locking being used, an unlock operation might not have any adverse effects. When effects exist, the most common consequence will be a corruption of the state of the product, possibly leading to a crash or exit; depending on the implementation of the unlocking, memory corruption or code execution could occur.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
