SB2026011473 - Use of uninitialized resource in Linux kernel caif
Published: January 14, 2026
Security Bulletin ID
SB2026011473
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Use of uninitialized resource (CVE-ID: CVE-2025-68799)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to use of uninitialized resource within the cffrml_receive() function in net/caif/cffrml.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/21fdcc00656a60af3c7aae2dea8dd96abd35519c
- https://git.kernel.org/stable/c/4ec29714aa4e0601ea29d2f02b461fc0ac92c2c3
- https://git.kernel.org/stable/c/785c7be6361630070790f6235b696da156ac71b3
- https://git.kernel.org/stable/c/8a11ff0948b5ad09b71896b7ccc850625f9878d1
- https://git.kernel.org/stable/c/f818cd472565f8b0c2c409b040e0121c5cf8592c