https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 05:28:41 +0000 https://vulnerability.circl.lu/vuln/cve-2026-68449 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning</p> <p>The hand-rolled bit-scanning loop in the NCQ completion path has an infinite loop bug. When tag_mask has only high bits set (e.g. 0x80000000), the inner while loop left-shifts tag_mask until it overflows to 0. At that point !(0 &amp; 1) is always true and 0 &lt;&lt;= 1 stays 0, causing an infinite loop in hardirq context with a spinlock held.</p> <p>Replace the open-coded bit-scanning with __ffs() which correctly finds the least significant set bit and is bounded by the width of the argument.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning</p> <p>The hand-rolled bit-scanning loop in the NCQ completion path has an infinite loop bug. When tag_mask has only high bits set (e.g. 0x80000000), the inner while loop left-shifts tag_mask until it overflows to 0. At that point !(0 &amp; 1) is always true and 0 &lt;&lt;= 1 stays 0, causing an infinite loop in hardirq context with a spinlock held.</p> <p>Replace the open-coded bit-scanning with __ffs() which correctly finds the least significant set bit and is bounded by the width of the argument.</p> https://vulnerability.circl.lu/vuln/cve-2026-68449