CVE-2026-68294: In the Linux kernel, the following vulnerability has been resolved: net: qrtr: restrict socket creation to the initial
Summary
A vulnerability in the Linux kernel's QRTR (Qualcomm IPC Router, a messaging system for communication with hardware like modems) allows unprivileged processes to bypass network namespace isolation (a security feature that separates network environments) by creating sockets in separate namespaces and sending messages that appear to come from legitimate local clients, breaking expected security boundaries.
Solution / Mitigation
Confine socket creation to the initial network namespace only, as stated in the fix: 'Confine the socket family to the initial network namespace, as other non-namespace-aware socket families do (see llc_ui_create() and the ieee802154 socket code).'
Vulnerability Details
EPSS: 0.0%
August 10, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-68294
First tracked: August 10, 2026 at 02:08 PM
Classified by LLM (prompt v3) · confidence: 95%