CVE-2026-72338 net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "include/net/tc_act/tc_pedit.h",
      "net/sched/act_api.c",
      "net/sched/act_pedit.c",
      "net/sched/cls_api.c"
    ],
    "versions": [
      {
        "version": "71d0ed7079dffbc5cd0941d77d9b84e04109c9bb",
        "lessThan": "0d8532a5e972a5351cf4ee4a435e0d65cbba8f23",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "71d0ed7079dffbc5cd0941d77d9b84e04109c9bb",
        "lessThan": "27488e1a7f19757e6146edca9458ed4ffc545557",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "71d0ed7079dffbc5cd0941d77d9b84e04109c9bb",
        "lessThan": "6f9b23eb92a894ae1118893996943990ee0b860e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "71d0ed7079dffbc5cd0941d77d9b84e04109c9bb",
        "lessThan": "8e49cd891bda447c68122d672510a604a8bb6b24",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "71d0ed7079dffbc5cd0941d77d9b84e04109c9bb",
        "lessThan": "8b519cbcabe836a441369fbec1a8a6518a709251",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "include/net/tc_act/tc_pedit.h",
      "net/sched/act_api.c",
      "net/sched/act_pedit.c",
      "net/sched/cls_api.c"
    ],
    "versions": [
      {
        "version": "4.11",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.11",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.145",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.97",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.40",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1.5",
        "lessThanOrEqual": "7.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2-rc3",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]