CVE-2026-74382 net/sched: cls_bpf: prevent unbounded recursion in offload rollback

🗓️ 15 Aug 2026 05:58:59Reported by GoogleType

osv

osv🔗 osv.dev👁 2 Views

cls_bpf_offload_cmd() stack overflow via recursive rollback when tc_setup_cb_replace fails twice consecutively.

Source	Link
git	www.git.kernel.org/stable/c/10753da2d659dd425a6e620f47f86852d604f67f
git	www.git.kernel.org/stable/c/1387f252a242a51bfbb6eace29c8f8db21b457da
git	www.git.kernel.org/stable/c/27db54b90bcc7c37867fe664107fa25ea6a116e4
git	www.git.kernel.org/stable/c/33373e1f378a501bc51aa73312f74295c84e3101
git	www.git.kernel.org/stable/c/3fa6fb5d771c992ebedbfa7331c6bcc6f33f89b7
git	www.git.kernel.org/stable/c/4a76953c3ed043797e81529b9395e9ca6f4c7609
git	www.git.kernel.org/stable/c/a018f208ab7512380bd4cf670064d48cba00a1b1
git	www.git.kernel.org/stable/c/e2d3b7bab3748c811dc5750ce9a8d62bc7f90ed7
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74382.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-74382

16 Aug 2026 03:48Current

5.7Medium risk

Vulners AI Score5.7

Linux kernel cls_bpf stack overflow recursion tc_setup_cb_replace offload rollback