PT-2026-94424

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fq init function where quantum and initial quantum are computed using psched mtu without overflow checks. When a device has an excessively large Maximum Transmissi...

CVE-2026-90076: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: add overflow bounds to quantum and initial quantum fqinit computes quantum = 2 pschedmtu and initialquantum = 10 pschedmtu with no overflow check. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU...

CVE-2026-90050: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: clamp quantum and initialquantum in change path The fq change path accepts TCAFQQUANTUM in 1, INTMAX and TCAFQINITIALQUANTUM up to INTMAX, while fqinit already clamps to 1, 120. A user can override the init clamp v...

PT-2026-94423

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fq codel init function where the q-quantum and q-cparams.mtu values are set using psched mtu without proper clamping. When a device is configured with an excessive...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: Avoid potential underflow in qdiscpktleninit with UFO After committing 7c6d2ecbda83 “net: Be more cautious regarding silly GSO requests from user space”, the virtionethdrtoskb function added sanity checks to detect...

EUVD-2026-67506

In the Linux kernel, the following vulnerability has been resolved: net/sched: schfqcodel: Do not call qdisctreereducebacklog during peek before restoring qlen Whenever fqcodel drops packets during peek, it calls qdisctreereducebacklog. An issue arises because it calls qdisctreereducebacklog befo...

CVE-2026-80630 net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen

In the Linux kernel, the following vulnerability has been resolved: net/sched: schfqcodel: Do not call qdisctreereducebacklog during peek before restoring qlen Whenever fqcodel drops packets during peek, it calls qdisctreereducebacklog. An issue arises because it calls qdisctreereducebacklog befo...

PT-2026-82930

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sch fq codel scheduler where qdisc tree reduce backlog is called during a peek operation before the qlen variable is restored. If qlen drops to zero while the peek...

GO-2026-6121 vulnerabilities

Vulnerabilities for packages: fq, cilium, calico-fips, cilium-fips, telegraf, calico...

GO-2026-6122 vulnerabilities

Vulnerabilities for packages: fq, cilium, calico-fips, cilium-fips, telegraf, calico...

GO-2026-6121 vulnerabilities

Vulnerabilities for packages: calico, fq, telegraf, cilium...

GO-2026-6122 vulnerabilities

Vulnerabilities for packages: calico, fq, telegraf, cilium...

GO-2024-3205 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, fq...

GO-2026-5208 vulnerabilities

Vulnerabilities for packages: gotenberg, temporal-ui-server-fips, kube-metrics-adapter-fips, fq, temporal, temporal-fips, snyk-cli, temporal-ui-server, kube-metrics-adapter...

GO-2024-3205 vulnerabilities

Vulnerabilities for packages: fq, kube-metrics-adapter...

GO-2026-5208 vulnerabilities

Vulnerabilities for packages: temporal, snyk-cli, temporal-ui-server, fq, kube-metrics-adapter...

CVE-2026-64207

In the Linux kernel, the following vulnerability has been resolved: net/sched: dualpi2: fix GSO backlog accounting When DualPI2 splits a GSO skb into N segments, it propagates N additional packets to its parent before returning NETXMITSUCCESS. The parent then accounts for the original skb once...

CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, caddy, vale, mattermost, kubernetes-dashboard, ingress-nginx-controller, step, step-issuer, kubernetes, istio, prometheus, gitea, hydra, telegraf, kyverno, crossplane-provider-aws-elasticache, falco-no-driver, helm, prometheus-operator,...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, caddy, vale, mattermost, kubernetes-dashboard, ingress-nginx-controller, step, step-issuer, kubernetes, istio, prometheus, gitea, hydra, telegraf, kyverno, crossplane-provider-aws-elasticache, falco-no-driver, helm, prometheus-operator,...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: external-secrets-operator, caddy, vale, mattermost, kubernetes-dashboard, ingress-nginx-controller, step, step-issuer, kubernetes, istio, prometheus, gitea, hydra, telegraf, kyverno, crossplane-provider-aws-elasticache, falco-no-driver, helm, prometheus-operator,...