CVE-2026-98629

The Linux kernel contains a vulnerability in the net/sched: cls_u32 component regarding manual hash table handle IDR aliasing . A u32 hash table created with an explicit handle keys its IDR entry on the raw handle, but the destroy path frees it using handle2id(handle). For handles in the 0x800..0...

CVE-2026-98629 net/sched: cls_u32: fix manual hash table handle IDR aliasing

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix manual hash table handle IDR aliasing A u32 hash table created with an explicit handle 'tc filter add ... handle 801: u32 divisor N' keys its IDR entry on the raw handle, while the destroy paths free it und...