What is the CVSS score of CVE-2026-68314?

CVE-2026-68314 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by CVE-2026-68314?

A memory corruption vulnerability in the Linux Kernel's MCTP I3C driver affects systems running kernel versions 6.7 and later when the mctp_i3c module loads under specific failure conditions.. A patch is available.

How to fix or mitigate CVE-2026-68314?

Within 24 hours, identify all Linux systems running kernel 6.7 through current unpatched stable branches in your infrastructure and verify whether the mctp_i3c module is loaded (lsmod | grep mctp_i3c). Within 7 days, apply the vendor-released kernel patch to all affected systems through your standard Linux update management process and schedule reboots to activate the patched kernel. Within 30 days, audit your Linux fleet to confirm all systems have been patched and no instances remain on vulnerable kernel versions.

Linux Kernel CVE-2026-68314

EUVD-2026-55415 HIGH

2026-08-10 Linux

GHSA-432r-7fw5-c4hj

Information Disclosure Linux

7.8

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

6.4 MEDIUM

Kernel module loading requires CAP_SYS_MODULE (PR:H); driver registration failure is a non-default condition (AC:H); dangling notifier enables potential memory corruption warranting C:H/I:H/A:H.

3.1 AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SUSE

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 14, 2026 - 02:07 vuln.today

CVSS changed

Aug 13, 2026 - 23:37 NVD

7.8 (HIGH)

Patch available

Aug 10, 2026 - 14:18 EUVD

CVE Published

Aug 10, 2026 - 12:02 cve.org

HIGH 7.8

CVE Published

Aug 10, 2026 - 12:02 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

net: mctp i3c: clean up notifier and buses if driver register fails

mctp_i3c_mod_init() registers the I3C bus notifier and then walks the existing buses with i3c_for_each_bus_locked(mctp_i3c_bus_add_new, NULL) before registering the I3C device driver. If i3c_driver_register() fails, the function returns the error directly, leaving the notifier registered and every mctp_i3c_bus object created for the existing buses allocated. The notifier is left pointing into the module that failed to load and the bus list is leaked.

Mirror the module exit path on this failure: unregister the notifier and tear down the buses that were added before returning the error.

This issue was identified during our ongoing static-analysis research while reviewing kernel code.

AnalysisAI

Linux Kernel's MCTP I3C driver leaves a dangling notifier and leaked bus objects when mctp_i3c_mod_init() encounters an error during i3c_driver_register(). Systems running Linux 6.7 through the unpatched stable branches are affected when the mctp_i3c module is loaded under specific failure conditions. No public exploit code has been identified and EPSS is 0.17%, but the theoretical impact includes kernel memory corruption via the stale notifier pointer if a subsequent I3C bus event fires against the freed module memory.

Technical ContextAI

The vulnerability resides in the MCTP (Management Component Transport Protocol) over I3C (Improved Inter-Integrated Circuit) subsystem of the Linux kernel, identified via CPE cpe:2.3:a:linux:linux. MCTP is a protocol used for communication between management controllers in server and embedded hardware. The bug is an incomplete error path in mctp_i3c_mod_init(): the function first registers an I3C bus notifier, then walks existing buses with i3c_for_each_bus_locked() to create mctp_i3c_bus objects, and finally calls i3c_driver_register(). If that final registration fails, the function returns the error directly rather than mirroring the module exit path - leaving the notifier registered with a pointer into module memory that never fully loaded, and leaking every mctp_i3c_bus allocation made for existing buses. CWE is unassigned in input data, but the root cause maps to CWE-459 (Incomplete Cleanup) with CWE-401 (Missing Release of Memory after Effective Lifetime) implications for the bus list leak.

RemediationAI

Apply vendor-released patches by upgrading to Linux 6.12.101 or later in the 6.12.x series, 6.18.42 or later in the 6.18.x series, 7.1.6 or later in the 7.1.x series, or 7.2-rc5 or later in mainline. The fix commits are available at https://git.kernel.org/stable/c/a40e83a34eaa2be64372286040696f04eabcd09f (and the three sibling stable-branch backport commits referenced above). As a targeted compensating control, administrators on systems without I3C management bus hardware can blacklist the mctp_i3c module by adding 'blacklist mctp_i3c' to /etc/modprobe.d/local.conf and running 'update-initramfs -u', which fully eliminates the vulnerable code path with no functional impact in environments lacking I3C hardware. This workaround has no meaningful trade-off on servers that do not use MCTP over I3C for BMC communication.

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Affected

CVE-2026-68314 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-68314

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code