CVE-2026-98220

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix NULL sched deref in kfunc sub-sched error paths When the root scheduler has sub-scheds attached, the COMPAT kfunc wrappers scxbpfselectcpuand and scxbpfdsqinsertvtime refuse the call and report to @p's scheduler:...

cve-2026-46331-audit

cve-2026-46331-audit -7.8%20HIGH-orange?style=flat-square Read-only audit script for CVE-2026-46331 a.k.a. pedit COW — a partial copy-on-write bug in the Linux kernel's net/sched actpedit action that lets a local unprivileged user corrupt page cache memory and escalate to root. | | | \ | | / / \ ...

PT-2026-106563

In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: cap hh flows limit at change time hhf change stores TCA HHF HH FLOWS LIMIT with no upper bound. A huge hh flows limit lets each new heavy-hitter flow pass the hh flows current cnt check in alloc new hh and forces ...

ROS-20261006-73-0357

The vulnerability of the rtscmin function in the net/sched/schhfsc.c module of the Linux operating system’s network/scheduling subsystem is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0354

The vulnerability of the flowchange function in the net/sched/clsflow.c module of the net/sched subsystem of the Linux operating system’s kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0352

The vulnerability of the fwchange function in the net/sched/clsfw.c module of the network scheduling subsystem of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0327

The vulnerability of the u32classify function in the net/sched/clsu32.c module of the network scheduling subsystem of the Linux operating system is related to the improper checking of specified indices, positions, or offsets in input data. Exploiting this vulnerability may allow an attacker to...

PT-2026-106548

In the Linux kernel, the following vulnerability has been resolved: sched ext: Close the pre-enable ops error claim window scx alloc and add sched publishes ops-priv before scx root enable workfn switches the state to SCX ENABLING. An error claimed via scx bpf error bstr from an associated BPF...

Linux Distros Unpatched Vulnerability : CVE-2026-98234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: hhf: cap hhflowslimit at change time hhfchange stores TCAHHFHHFLOWSLIMIT with no upper bound. A huge hhflowslimit lets each new heavy-hitter flow pas...

Linux Distros Unpatched Vulnerability : CVE-2026-98235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actapi: release tail references on DELACTION failure A batched RTMDELACTION request takes a temporary reference on each action before attempting any...

PT-2026-106564

In the Linux kernel, the following vulnerability has been resolved: net/sched: act api: release tail references on DELACTION failure A batched RTM DELACTION request takes a temporary reference on each action before attempting any deletion. tcf action delete clears each processed slot and drops it...

ROS-20261006-73-0014

The vulnerability of the etsoffloadchange function in the net/sched/schets.c module of the net/sched subsystem of the Linux operating system is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-68138

CVE-2026-68138 — Linux kernel net/sched qdisc rate-table UAF tracking site Source for the CVE-2026-68138 patch-status tracker: a single-page site recording which distributions have shipped a fix for the net/sched qdisc rate-table use-after-free / double-free in the Linux kernel. Where the facts...

CVE-2026-46331

🚨 CVE-2026-46331 - LinuxカーネルCOWバグ Linuxカーネル net/sched 部分的なコピーオンライト（COW）ページキャッシュ破損 -orange?style=for-the-badge Linuxカーネルの脆弱性で、トラフィック制御（tc）パケット編集サブシステムにおける不正確なコピーオンライト（COW）処理に起因します。 📖 概要 CVE-2026-46331 は、net/sched パケット編集（actpedit）サブシステムに影響を与えるLinuxカーネルの脆弱性です。 この脆弱性は、カーネルが実際のパケット編集オフセットが判明する前に...

packet_edit_meme

PACKETEDITMEME - 別名 CVE-2026-46331 net/sched actpedit の部分COWページキャッシュ破損（原因コミット 899ee91156e5、 v5.18 から存在し、v7.1-rc7 で修正）。packeteditmeme.c はこれを非特権ユーザーによる ローカル root 権限奪取へと変えます: userns CAPNETADMIN を持つ子プロセスが、setuid-root の /bin/su のキャッシュ済み ELF エントリを setgid0+setuid0+execve"/bin/sh" シェルコードで上書きします。 make...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: schsfb: Replace the direct dequeue call with peek and qdiscdequeuepeeked. When sfb has children e.g., qfq qdisc whose peek callback is qdiscpeekdequeued, we could encounter a kernel panic. When the parent of such qdisc...

kernel: net/sched: act_ct: Only release RCU read lock after ct_ft

A flaw was found in the Linux kernel. A race condition in the actct module, specifically during the flow table lookup, can lead to a Use-After-Free UAF vulnerability. This occurs because a critical lock is released prematurely, allowing a memory object to be freed while still in use. An attacker...

K000163548: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2025-71066 In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange [email protected] says: The vulnerability is a race condition between etsqdiscdequeu...

ROS-20261005-73-0103

The vulnerability of the teqlmasterxmit function in the net/sched/schteql.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE SLES16 Security Update : kernel (Live Patch 0 for SUSE Linux Enterprise 16) (SUSE-SU-2026:23936-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23936-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues we...