Answer in brief
CVE-2026-68449 records a Unknown severity vulnerability in ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=62936009f35a6659cc3ebe0d90c754182d60da73 <4c6e64cae2b2dab32ad9099faa339f6a72c0ce16 || >=62936009f35a6659cc3ebe0d90c754182d60da73 <8c5de0d8ab6824cfdadcbbe1be4c6c9d9f4c1f80 || >=62936009f35a6659cc3ebe0d90c754182d60da73 <1842d45f461a78988254631893329bdf4596e954 || >=62936009f35a6659cc3ebe0d90c754182d60da73 <29b916d3556bd12a95be7c56ca391b8cd572f8be || >=62936009f35a6659cc3ebe0d90c754182d60da73 <c2130f6553f4a5cbdc259de069600117a995f197 | 4c6e64cae2b2dab32ad9099faa339f6a72c0ce16, 8c5de0d8ab6824cfdadcbbe1be4c6c9d9f4c1f80, 1842d45f461a78988254631893329bdf4596e954, 29b916d3556bd12a95be7c56ca391b8cd572f8be, c2130f6553f4a5cbdc259de069600117a995f197 |
| Linux/Linuxgeneric | 2.6.36 | Not reported |
Published upstream
Aug 12, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 12, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 12, 2026
In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning The hand-rolled bit-scanning loop in the NCQ completion path has an infinite loop bug. When tag_mask has only high bits set (e.g. 0x80000000), the inner while loop left-shifts tag_mask until it overflows to 0. At that point !(0 & 1) is always true and 0 <<= 1 stays 0, causing an infinite loop in hardirq context with a spinlock held. Replace the open-coded bit-scanning with __ffs() which correctly finds the least significant set bit and is bounded by the width of the argument.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-68449 records a Unknown severity vulnerability in ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=62936009f35a6659cc3ebe0d90c754182d60da73 <4c6e64cae2b2dab32ad9099faa339f6a72c0ce16 || >=62936009f35a6659cc3ebe0d90c754182d60da73 <8c5de0d8ab6824cfdadcbbe1be4c6c9d9f4c1f80 || >=62936009f35a6659cc3ebe0d90c754182d60da73 <1842d45f461a78988254631893329bdf4596e954 || >=62936009f35a6659cc3ebe0d90c754182d60da73 <29b916d3556bd12a95be7c56ca391b8cd572f8be || >=62936009f35a6659cc3ebe0d90c754182d60da73 <c2130f6553f4a5cbdc259de069600117a995f197 | 4c6e64cae2b2dab32ad9099faa339f6a72c0ce16, 8c5de0d8ab6824cfdadcbbe1be4c6c9d9f4c1f80, 1842d45f461a78988254631893329bdf4596e954, 29b916d3556bd12a95be7c56ca391b8cd572f8be, c2130f6553f4a5cbdc259de069600117a995f197 |
| Linux/Linuxgeneric | 2.6.36 | Not reported |
Published upstream
Aug 12, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 12, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 12, 2026
In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning The hand-rolled bit-scanning loop in the NCQ completion path has an infinite loop bug. When tag_mask has only high bits set (e.g. 0x80000000), the inner while loop left-shifts tag_mask until it overflows to 0. At that point !(0 & 1) is always true and 0 <<= 1 stays 0, causing an infinite loop in hardirq context with a spinlock held. Replace the open-coded bit-scanning with __ffs() which correctly finds the least significant set bit and is bounded by the width of the argument.
Quoted source text, attributed separately from HOL analysis.