-

CVE-2026-74663

net/sched: reject overly deep qdisc hierarchies

In the Linux kernel, the following vulnerability has been resolved:

net/sched: reject overly deep qdisc hierarchies

Deep qdisc hierarchies can lead to excessive recursion in qdisc tree
walkers and exhaust the kernel stack. The existing loop check does not
cover the create-and-graft path, so a hierarchy can still be extended by
creating a new child qdisc below an already deep parent.

Store the hierarchy depth in struct Qdisc and update it when qdiscs are
grafted. Reject new child qdiscs once the parent is already at the maximum
allowed depth.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 9f69bb9fdaa2fe64b68bb62fb84d405784bee540
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 8ca8cdb74939581339e1ae370193c0adb5a85336
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 2759acf08a3454866660edcd3ef4e64139f254a6
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < a4b14a4df29d36458a943f9b521ddd0f940363cc
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < e2d658c6427844cee5bc654b436ca68d680b6148
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < dedd34b0f2310e28c5f6d4875cfbf4b7ed821c01
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 2.6.12
Status affected
Version 0
Version < 2.6.12
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.152
Status unaffected
Version <= 6.12.*
Version 6.12.104
Status unaffected
Version <= 6.18.*
Version 6.18.45
Status unaffected
Version <= 7.1.*
Version 7.1.9
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.067
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/2759acf08a3454866660edcd3ef4e64139f254a6
https://git.kernel.org/stable/c/8ca8cdb74939581339e1ae370193c0adb5a85336
https://git.kernel.org/stable/c/9f69bb9fdaa2fe64b68bb62fb84d405784bee540
https://git.kernel.org/stable/c/a4b14a4df29d36458a943f9b521ddd0f940363cc
https://git.kernel.org/stable/c/dedd34b0f2310e28c5f6d4875cfbf4b7ed821c01
https://git.kernel.org/stable/c/e2d658c6427844cee5bc654b436ca68d680b6148