CVE-2026-99167

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in tcfactionput tcfactionput decrements the reference count before decrementing the binding count. Another thread can free the action between these operations, causing the binding-count update to...

CVE-2026-99167

The Linux kernel contains a use-after-free vulnerability in the net/sched component within the __tcf_action_put() function. The root cause is that the function decrements the reference count before the binding count, allowing another thread to free the action in the interim, leading to a memory a...

CVE-2026-99167 net/sched: fix use-after-free in __tcf_action_put()

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in tcfactionput tcfactionput decrements the reference count before decrementing the binding count. Another thread can free the action between these operations, causing the binding-count update to...

EUVD-2026-111919

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in tcfactionput tcfactionput decrements the reference count before decrementing the binding count. Another thread can free the action between these operations, causing the binding-count update to...