SUSE CVE-2026-74594

In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpolltimer in psicgroupfree psischedulertpollwork is called locklessly from the scheduler hotpath and can race psitriggerdestroy taking down the last rtpoll trigger under rtpolltriggerlock:...

CVE-2026-74663

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path, so a...

CVE-2026-74663 net/sched: reject overly deep qdisc hierarchies

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path, so a...

CVE-2026-74663

CVE-2026-74663 affects the Linux kernel 's net/sched subsystem. Deep qdisc hierarchies can trigger excessive recursion in qdisc tree walkers, leading to kernel stack exhaustion . The existing loop check does not cover the create-and-graft path, allowing a hierarchy to be extended by grafting a ne...

CVE-2026-74621 net/sched: act_ct: fix sk_buff leak when the header checks reject a packet

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix skbuff leak when the header checks reject a packet tcfcthandlefragments runs its header sanity checks before handing anything to the defragmentation engine: if family == NFPROTOIPV4 err =...

CVE-2026-74621

CVE-2026-74621 is an unbounded memory leak in the Linux kernel's net/sched: act_ct (traffic control connection tracking action). When tcf_ct_handle_fragments() rejects a packet due to failed header sanity checks (e.g., -EINVAL, -ENOMEM, -EPROTO), the sk_buff is not freed or queued, yet tcf_ct_act...

CVE-2026-74594

This Linux kernel vulnerability is a use-after-free in the Pressure Stall Information (PSI) subsystem. A race between psi_schedule_rtpoll_work() (called locklessly from the scheduler hotpath) and psi_trigger_destroy() allows the rtpoll_timer to be re-armed after the cgroup is freed, causing poll_...

EUVD-2026-64531

In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpolltimer in psicgroupfree psischedulertpollwork is called locklessly from the scheduler hotpath and can race psitriggerdestroy taking down the last rtpoll trigger under rtpolltriggerlock:...

PT-2026-79736

In the Linux kernel, the following vulnerability has been resolved: sched ext: Skip sub-disable teardown for never-linked sub-schedulers A sub-scheduler enable can fail before scx link sched links the sched into the hierarchy, e.g. when the parent is already being disabled, and cleanup still runs...

PT-2026-79626

In the Linux kernel, the following vulnerability has been resolved: net/sched: act ct: fix sk buff leak when the header checks reject a packet tcf ct handle fragments runs its header sanity checks before handing anything to the defragmentation engine: if family == NFPROTO IPV4 err = tcf ct ipv4 i...

PT-2026-79668

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path, so a...

PT-2026-79598

In the Linux kernel, the following vulnerability has been resolved: sched ext: Take cgroup lock first in scx cgroup lock scx cgroup lock write-locks scx cgroup ops rwsem and then takes cgroup lock, which can deadlock through kernfs: scx enable/disable cgroup rmdir cpu.weight write...

Linux Distros Unpatched Vulnerability : CVE-2026-74594

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sched/psi: Shut down rtpolltimer in psicgroupfree psischedulertpollwork is called locklessly from the scheduler hotpath and can race psitriggerdestroy taking...

CVE-2026-74583

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers indexed by id, iif. The reader route4classify populates this cache via...

PT-2026-79404

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls route: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4 filter pointers indexed by id, iif. The reader route4 classify populates this cache...

Linux Distros Unpatched Vulnerability : CVE-2026-74284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schhfsc: Don't make class passive twice updatevf is called from two places for the same class during a single dequeue when the class's child qdisc e....

Linux Distros Unpatched Vulnerability : CVE-2026-72326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: cake: reject overhead values that underflow length CAKE accepts signed overhead values and stores them in an s16, but the adjusted packet length...

Linux Distros Unpatched Vulnerability : CVE-2026-72430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actct: fix nfconnlabels leak on two error paths tcfctfillparams calls nfconnlabelsget setting putlabels when TCACTLABELS is present, but two later...

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...