CVE-2026-68449
Detail
Received This CVE record has recently been published to the CVE List and has been included within the NVD dataset.
Description
In the Linux kernel, the following vulnerability has been resolved:
ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning
The hand-rolled bit-scanning loop in the NCQ completion path has an
infinite loop bug. When tag_mask has only high bits set (e.g.
0x80000000), the inner while loop left-shifts tag_mask until it
overflows to 0. At that point !(0 & 1) is always true and 0 <<= 1
stays 0, causing an infinite loop in hardirq context with a spinlock
held.
Replace the open-coded bit-scanning with __ffs() which correctly
finds the least significant set bit and is bounded by the width of
the argument.
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 2.0 Severity and Vector Strings:
NVD assessment
not yet provided.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected]
Change History
3 change records found show changes
CVE Modified by kernel.org
8/19/2026 1:20:50 PM
Action
Type
Old Value
New Value
Added
Reference
https://git.kernel.org/stable/c/d72e8089dc332ac48293512ef0de77cbe0e04d25
Added
Reference
https://git.kernel.org/stable/c/ea9fa4dabe476f85fe73df30a6ab61a23c22fda4
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/ata/sata_dwc_460ex.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"4c6e64cae2b2dab32ad9099faa339f6a72c0ce16","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"8c5de0d8ab6824cfdadcbbe1be4c6c9d9f4c1f80","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"1842d45f461a78988254631893329bdf4596e954","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"29b916d3556bd12a95be7c56ca391b8cd572f8be","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"c2130f6553f4a5cbdc259de069600117a995f197","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/ata/sata_dwc_460ex.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.36","status":"affected"},{"version":"0","lessThan":"2.6.36","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Record truncated, showing 2048 of 2231 characters.
View Entire Change Record [{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/ata/sata_dwc_460ex.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"ea9fa4dabe476f85fe73df30a6ab61a23c22fda4","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"d72e8089dc332ac48293512ef0de77cbe0e04d25","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"4c6e64cae2b2dab32ad9099faa339f6a72c0ce16","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"8c5de0d8ab6824cfdadcbbe1be4c6c9d9f4c1f80","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"1842d45f461a78988254631893329bdf4596e954","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"29b916d3556bd12a95be7c56ca391b8cd572f8be","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"c2130f6553f4a5cbdc259de069600117a995f197","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/ata/sata_dwc_460ex.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.36","status":"affected"},{"version":"0","lessThan":"2.6.36","versionType":"semver","status":"unaffected"},{"version":"5.10.265","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.216","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"
CVE Modified by kernel.org
8/17/2026 2:17:54 AM
Action
Type
Old Value
New Value
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/ata/sata_dwc_460ex.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"4c6e64cae2b2dab32ad9099faa339f6a72c0ce16","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"8c5de0d8ab6824cfdadcbbe1be4c6c9d9f4c1f80","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"1842d45f461a78988254631893329bdf4596e954","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"29b916d3556bd12a95be7c56ca391b8cd572f8be","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"c2130f6553f4a5cbdc259de069600117a995f197","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/ata/sata_dwc_460ex.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.36","status":"affected"},{"version":"0","lessThan":"2.6.36","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc4","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/ata/sata_dwc_460ex.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"4c6e64cae2b2dab32ad9099faa339f6a72c0ce16","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"8c5de0d8ab6824cfdadcbbe1be4c6c9d9f4c1f80","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"1842d45f461a78988254631893329bdf4596e954","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"29b916d3556bd12a95be7c56ca391b8cd572f8be","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"c2130f6553f4a5cbdc259de069600117a995f197","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/ata/sata_dwc_460ex.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.36","status":"affected"},{"version":"0","lessThan":"2.6.36","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
New CVE Received from kernel.org
8/11/2026 9:17:07 PM
Action
Type
Old Value
New Value
Added
Description
In the Linux kernel, the following vulnerability has been resolved:
ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning
The hand-rolled bit-scanning loop in the NCQ completion path has an
infinite loop bug. When tag_mask has only high bits set (e.g.
0x80000000), the inner while loop left-shifts tag_mask until it
overflows to 0. At that point !(0 & 1) is always true and 0 <<= 1
stays 0, causing an infinite loop in hardirq context with a spinlock
held.
Replace the open-coded bit-scanning with __ffs() which correctly
finds the least significant set bit and is bounded by the width of
the argument.
Added
Reference
https://git.kernel.org/stable/c/1842d45f461a78988254631893329bdf4596e954
Added
Reference
https://git.kernel.org/stable/c/29b916d3556bd12a95be7c56ca391b8cd572f8be
Added
Reference
https://git.kernel.org/stable/c/4c6e64cae2b2dab32ad9099faa339f6a72c0ce16
Added
Reference
https://git.kernel.org/stable/c/8c5de0d8ab6824cfdadcbbe1be4c6c9d9f4c1f80
Added
Reference
https://git.kernel.org/stable/c/c2130f6553f4a5cbdc259de069600117a995f197
Added
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/ata/sata_dwc_460ex.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"4c6e64cae2b2dab32ad9099faa339f6a72c0ce16","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"8c5de0d8ab6824cfdadcbbe1be4c6c9d9f4c1f80","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"1842d45f461a78988254631893329bdf4596e954","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"29b916d3556bd12a95be7c56ca391b8cd572f8be","versionType":"git","status":"affected"},{"version":"62936009f35a6659cc3ebe0d90c754182d60da73","lessThan":"c2130f6553f4a5cbdc259de069600117a995f197","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/ata/sata_dwc_460ex.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.36","status":"affected"},{"version":"0","lessThan":"2.6.36","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc4","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Quick Info
CVE Dictionary Entry: CVE-2026-68449 NVD
Published Date: 08/11/2026 NVD
Last Modified: 08/19/2026
Source: kernel.org
) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
