Search: CVE-2026-68294

CVE-2026-68294 is a vulnerability in the Linux kernel's QRTR socket family that allows creation of AF_QIPCRTR sockets in non-initial network namespaces. This breaks network namespace isolation because QRTR's global state is shared across namespaces, enabling unprivileged processes to send and receive QRTR datagrams across namespaces, potentially impersonating legitimate local clients. The issue is fixed by restricting socket creation to the initial network namespace only.