The vulnerability of the flow_change() function in the net/sched/cls_flow.c module of the net/sched/traffic control subsystem in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the flowchange function in the net/sched/clsflow.c module of the net/sched subsystem of the Linux operating system’s kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-31422: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsflow: fix NULL pointer dereference on shared blocks flowchange calls tcfblockq and dereferences q-handle to derive a default baseclass. Shared blocks leave block-q NULL, causing a NULL deref when a flow filter witho...