7.8

CVE-2026-98017

net/sched: defer qdisc freeing after failed creation

In the Linux kernel, the following vulnerability has been resolved:

net/sched: defer qdisc freeing after failed creation

An RTM_NEWQDISC request can make clsact bind a populated shared ingress
block during ->init(), publishing an embedded mini_Qdisc to lockless
readers.  If the same request has an invalid TCA_RATE, estimator setup
fails after ->init(); the unwind removes the pointer but synchronously
frees its containing qdisc while tc_run() may still hold it.

Retire failed qdiscs through the same RCU helper as normal destruction.
Inline the synchronous free into the callback now that no direct callers
remain.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 51ab2994c387c80b45caf8b8067b3f3b97771d25
Version < 96a27a3e64e7c87abade03fb2ad04ed66992a89a
Status affected
Version 51ab2994c387c80b45caf8b8067b3f3b97771d25
Version < 6a1b49bb9fdf9e8e7aa38e8cd635c0cc4074447d
Status affected
Version 51ab2994c387c80b45caf8b8067b3f3b97771d25
Version < 20bf6fa34b345333971bd4464a322cce87b83f4e
Status affected
Version 51ab2994c387c80b45caf8b8067b3f3b97771d25
Version < 156a3bab69744e9225bb9eff8c5cc53da18d5a2e
Status affected
Version 51ab2994c387c80b45caf8b8067b3f3b97771d25
Version < 5bfe927c5b4b290fad529186218c728589b4b101
Status affected
Version 51ab2994c387c80b45caf8b8067b3f3b97771d25
Version < e6662f2100f8d33b0f4d0047c219efd6bba186ea
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.16
Status affected
Version 0
Version < 4.16
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= 7.2.*
Version 7.2.7
Status unaffected
Version <= *
Version 7.3-rc3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.021
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/20bf6fa34b345333971bd4464a322cce87b83f4e
https://git.kernel.org/stable/c/156a3bab69744e9225bb9eff8c5cc53da18d5a2e
https://git.kernel.org/stable/c/5bfe927c5b4b290fad529186218c728589b4b101
https://git.kernel.org/stable/c/e6662f2100f8d33b0f4d0047c219efd6bba186ea
https://git.kernel.org/stable/c/6a1b49bb9fdf9e8e7aa38e8cd635c0cc4074447d
https://git.kernel.org/stable/c/96a27a3e64e7c87abade03fb2ad04ed66992a89a