CVE-2026-68179
Description
A flaw was found in the Linux kernel's Network Shared Memory (NSM) module. A local attacker can exploit an issue in the nsm_dev_ioctl() function where an incorrect mutex unlock operation is performed. This occurs when an initial data copy fails, leading to an attempt to unlock a mutex that was never acquired. Successful exploitation can result in a kernel panic, causing a denial of service (DoS).
Statement
Red Hat Enterprise Linux is not affected by this vulnerability because the flawed driver implementation is not present in supported kernel versions. In upstream environments, local users could trigger an unbalanced lock release and subsequent system crash through invalid device control requests. Because Red Hat kernels do not package or include the vulnerable code, this issue poses no security risk to supported deployments.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
