CVE-2026-68143
Received Received - Intake

Race Condition in Linux Kernel SLIP Networking

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: slip: serialize receive against buffer reallocation sl_realloc_bufs() replaces rbuff and updates buffsize while holding sl->lock. slip_receive_buf() reads those fields and writes through rbuff without holding the lock. An MTU change can therefore race with receive processing. An MTU shrink can expose the new smaller rbuff with the old larger bound, causing an out-of-bounds write. A receive callback which already loaded the old rbuff can instead continue writing after that buffer has been freed. Serialize receive processing with sl_realloc_bufs() by holding sl->lock while consuming each receive batch.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68143
EUVD
EUVD-2026-55526

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a race condition in the SLIP (Serial Line Internet Protocol) network driver. The issue occurs when the buffer size is changed while data is being received. Specifically, a function that reallocates buffers does not properly synchronize with the function that processes incoming data, leading to potential out-of-bounds memory writes or use-after-free scenarios.

Detection Guidance

This vulnerability involves a race condition in the Linux kernel's SLIP protocol handling. Detection requires checking kernel logs for SLIP-related errors or crashes, particularly after MTU changes. Monitor for kernel oops or warnings about out-of-bounds writes in slip_receive_buf. No specific commands are provided in the context.

Impact Analysis

This vulnerability could allow an attacker to cause a denial-of-service condition or execute arbitrary code on a vulnerable system. It may lead to system crashes, data corruption, or unauthorized access, depending on the attacker's capabilities and system configuration.

Mitigation Strategies

Apply the latest Linux kernel patches to address the race condition in the SLIP protocol. Avoid frequent MTU changes on interfaces using SLIP. If SLIP is unused, consider disabling the module to eliminate exposure. Monitor kernel security advisories for updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68143. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart