CVE-2026-68328
Detail
Received This CVE record has recently been published to the CVE List and has been included within the NVD dataset.
Description
In the Linux kernel, the following vulnerability has been resolved:
nfp: Check resource mutex allocation
nfp_cpp_resource_find() allocates a CPP mutex handle for the matching
resource-table entry and then reports success. nfp_resource_try_acquire()
immediately passes that handle to nfp_cpp_mutex_trylock().
However, nfp_cpp_mutex_alloc() returns NULL on failure. If that happens
for a matching table entry, the resource lookup still returns success and
the following trylock dereferences a NULL mutex pointer while opening the
resource.
nfp_resource_acquire() already treats failure to allocate the table mutex
as -ENOMEM. Do the same for the resource mutex and fail the lookup before
publishing the rest of the resource handle.
This issue was found by a static analysis checker and confirmed by
manual source review.
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 2.0 Severity and Vector Strings:
NVD assessment
not yet provided.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected]
Change History
3 change records found show changes
CVE Modified by kernel.org
8/19/2026 1:20:43 PM
Action
Type
Old Value
New Value
Added
Reference
https://git.kernel.org/stable/c/0dbd85a8cc35c14bd26e686fa5fae8c64a7958ae
Added
Reference
https://git.kernel.org/stable/c/18737a48acc87e4cbe41d6fea9a3f44eae490e24
Added
Reference
https://git.kernel.org/stable/c/423523f96a681428ce6e214eaf47f0d8242319de
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/net/ethernet/netronome/nfp/nfpcore/nfp_resource.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"6dbd428119cb1fd1b73cf6968c711f4ea964dc8b","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"cfa119aa781c4044dab5b4c1e5864600f53a26bc","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"3b1d4fc3b73ea6faf008a0996ce6190c6e43efc3","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"a7dc30b6828c3a30252892827b12b676749f250f","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"a61b4db34a753bdf5c9e77a7f3d3dddd41dcfacc","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/net/ethernet/netronome/nfp/nfpcore/nfp_resource.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"4.11","status":"affected"},{"version":"0","lessThan":"4.11","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Record truncated, showing 2048 of 2527 characters.
View Entire Change Record [{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/net/ethernet/netronome/nfp/nfpcore/nfp_resource.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"18737a48acc87e4cbe41d6fea9a3f44eae490e24","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"423523f96a681428ce6e214eaf47f0d8242319de","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"0dbd85a8cc35c14bd26e686fa5fae8c64a7958ae","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"6dbd428119cb1fd1b73cf6968c711f4ea964dc8b","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"cfa119aa781c4044dab5b4c1e5864600f53a26bc","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"3b1d4fc3b73ea6faf008a0996ce6190c6e43efc3","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"a7dc30b6828c3a30252892827b12b676749f250f","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"a61b4db34a753bdf5c9e77a7f3d3dddd41dcfacc","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/net/ethernet/netronome/nfp/nfpcore/nfp_resource.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"4.11","status":"affected"},{"version":"0","lessThan":"4.11","versionType":"semver","status":"unaffected"},{"version":"5.10.265","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.216","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.183","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"
CVE Modified by kernel.org
8/17/2026 2:17:40 AM
Action
Type
Old Value
New Value
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/net/ethernet/netronome/nfp/nfpcore/nfp_resource.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"6dbd428119cb1fd1b73cf6968c711f4ea964dc8b","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"cfa119aa781c4044dab5b4c1e5864600f53a26bc","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"3b1d4fc3b73ea6faf008a0996ce6190c6e43efc3","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"a7dc30b6828c3a30252892827b12b676749f250f","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"a61b4db34a753bdf5c9e77a7f3d3dddd41dcfacc","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/net/ethernet/netronome/nfp/nfpcore/nfp_resource.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"4.11","status":"affected"},{"version":"0","lessThan":"4.11","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc5","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/net/ethernet/netronome/nfp/nfpcore/nfp_resource.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"6dbd428119cb1fd1b73cf6968c711f4ea964dc8b","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"cfa119aa781c4044dab5b4c1e5864600f53a26bc","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"3b1d4fc3b73ea6faf008a0996ce6190c6e43efc3","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"a7dc30b6828c3a30252892827b12b676749f250f","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"a61b4db34a753bdf5c9e77a7f3d3dddd41dcfacc","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/net/ethernet/netronome/nfp/nfpcore/nfp_resource.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"4.11","status":"affected"},{"version":"0","lessThan":"4.11","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
New CVE Received from kernel.org
8/10/2026 9:20:23 AM
Action
Type
Old Value
New Value
Added
Description
In the Linux kernel, the following vulnerability has been resolved:
nfp: Check resource mutex allocation
nfp_cpp_resource_find() allocates a CPP mutex handle for the matching
resource-table entry and then reports success. nfp_resource_try_acquire()
immediately passes that handle to nfp_cpp_mutex_trylock().
However, nfp_cpp_mutex_alloc() returns NULL on failure. If that happens
for a matching table entry, the resource lookup still returns success and
the following trylock dereferences a NULL mutex pointer while opening the
resource.
nfp_resource_acquire() already treats failure to allocate the table mutex
as -ENOMEM. Do the same for the resource mutex and fail the lookup before
publishing the rest of the resource handle.
This issue was found by a static analysis checker and confirmed by
manual source review.
Added
Reference
https://git.kernel.org/stable/c/3b1d4fc3b73ea6faf008a0996ce6190c6e43efc3
Added
Reference
https://git.kernel.org/stable/c/6dbd428119cb1fd1b73cf6968c711f4ea964dc8b
Added
Reference
https://git.kernel.org/stable/c/a61b4db34a753bdf5c9e77a7f3d3dddd41dcfacc
Added
Reference
https://git.kernel.org/stable/c/a7dc30b6828c3a30252892827b12b676749f250f
Added
Reference
https://git.kernel.org/stable/c/cfa119aa781c4044dab5b4c1e5864600f53a26bc
Added
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/net/ethernet/netronome/nfp/nfpcore/nfp_resource.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"6dbd428119cb1fd1b73cf6968c711f4ea964dc8b","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"cfa119aa781c4044dab5b4c1e5864600f53a26bc","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"3b1d4fc3b73ea6faf008a0996ce6190c6e43efc3","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"a7dc30b6828c3a30252892827b12b676749f250f","versionType":"git","status":"affected"},{"version":"f01a2161577d31b14581e0db3bbbdfa963f145b6","lessThan":"a61b4db34a753bdf5c9e77a7f3d3dddd41dcfacc","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/net/ethernet/netronome/nfp/nfpcore/nfp_resource.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"4.11","status":"affected"},{"version":"0","lessThan":"4.11","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc5","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Quick Info
CVE Dictionary Entry: CVE-2026-68328 NVD
Published Date: 08/10/2026 NVD
Last Modified: 08/19/2026
Source: kernel.org
) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
