Stack Out-of-Bounds Read Vulnerability in Linux Kernel Affects IPTFS Policies

CVE-2026-68420

What is CVE-2026-68420?

A vulnerability has been identified in the Linux kernel that allows for a stack out-of-bounds read when specific outbound policies are in use with optional IPTFS templates. This issue arises due to the improper handling of these templates, potentially allowing attackers to read sensitive information from kernel memory. In response to reports, recent updates have extended the checks to disallow optional IPTFS in outbound policies, ensuring they are treated in the same way as tunnel mode templates. The vulnerability specifically affects outbound networking and does not impact inbound or forwarding policies.

References