CVE-2026-68138

CVE-2026-68138 — sitio de seguimiento del UAF de la tabla de tasas de qdisc net/sched del kernel de Linux Fuente del rastreador de estado de parches CVE-2026-68138 : un sitio de una sola página que registra qué distribuciones han publicado una corrección para el uso después de liberación / doble...

cve-2026-46331-audit

cve-2026-46331-audit Script de auditoría de solo lectura para CVE-2026-46331 también conocido como pedit COW — un error parcial de copia en escritura en la acción actpedit del subsistema net/sched del kernel de Linux que permite a un usuario local no privilegiado corromper la memoria caché de...

CVE-2026-46331

PACKETEDITMEME - CVE-2026-46331 net/sched actpedit corrupción de caché de página parcial-COW culpable 899ee91156e5, presente v5.18 .. corregido v7.1-rc7. packeteditmeme.c lo convierte en root local sin privilegios: un hijo userns CAPNETADMIN sobrescribe los metadatos ELF almacenados en caché de u...

CVE-2026-46331

🚨 CVE-2026-46331 - Error COW del Kernel de Linux Corrupción de la Caché de Páginas por Copia en Escritura COW Parcial en net/sched del Kernel de Linux -orange?style=for-the-badge Una vulnerabilidad del kernel de Linux causada por un manejo incorrecto de la Copia en Escritura COW en el subsistema ...

packet_edit_meme

PACKETEDITMEME - también conocido como CVE-2026-46331 net/sched actpedit corrupción parcial de la caché de páginas por COW culpable 899ee91156e5, presente v5.18 .. corregido v7.1-rc7. packeteditmeme.c lo convierte en root local sin privilegios: un hijo con userns CAPNETADMIN sobrescribe la entrad...

EUVD-2026-66569

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: skip hash tables in u32bindclass u32walk enumerates both struct tcuhnode and struct tcuknode through the walker callback. u32bindclass unconditionally casts the passed fh to tcuknode and accesses &n-res, so whe...

AZL-97767 CVE-2026-74736 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified that a device-bound offloaded program's bound netdev matches the TC...

AZL-97740 CVE-2026-74739 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: skip hash tables in u32bindclass u32walk enumerates both struct tcuhnode and struct tcuknode through the walker callback. u32bindclass unconditionally casts the passed fh to tcuknode and accesses &n-res, so whe...

CVE-2026-74740

CVE-2026-74740 is a TOCTOU (time-of-check-time-of-use) NULL pointer dereference in the Linux kernel's net/sched: act_api subsystem. When handling TC_ACT_GOTO_CHAIN, tcf_action_exec() performs an initial rcu_access_pointer(a->goto_chain) check, then calls tcf_action_goto_chain_exec() which perf...

CVE-2026-74740 net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: fix TOCTOU NULL deref on a-gotochain tcfactionexec handles TCACTGOTOCHAIN by first checking rcuaccesspointera-gotochain and then calling tcfactiongotochainexec, which does a second, independent...

CVE-2026-74739

CVE-2026-74739 is a slab-out-of-bounds read in the Linux kernel's net/sched cls_u32 traffic classification module. The root cause is in u32_bind_class(), which unconditionally casts a handle to tc_u_knode and dereferences &n->res; when the handle is actually a tc_u_hnode (hash table node with ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099008)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099008 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schred: Replace direct dequeue call with peek and qdiscdequeuepeeked When red qdisc ha...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098818 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: do not free existing class in qfqchangeclass Fixes qfqchangeclass error case...

VulnCheck KEV: CVE-2026-46331

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcfpeditact computes the COW range for skbensurewritable once before the key loop using tcfpoffmaxhint, but the hint does not account for the runtime header offset...

Linux Distros Unpatched Vulnerability : CVE-2026-74740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actapi: fix TOCTOU NULL deref on a-gotochain tcfactionexec handles TCACTGOTOCHAIN by first checking rcuaccesspointera-gotochain and then calling...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_73-default / etc (SUSE-SU-2026:3704-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3704-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.73 fixes various security issues: The following security issues were fixed: -...

Linux Distros Unpatched Vulnerability : CVE-2026-74739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsu32: skip hash tables in u32bindclass u32walk enumerates both struct tcuhnode and struct tcuknode through the walker callback. u32bindclass...

Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

The vulnerability of the fw_change() function in the net/sched/cls_fw.c module of the network scheduling subsystem of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fwchange function in the net/sched/clsfw.c module of the network scheduling subsystem of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-74620

A flaw was found in the Linux kernel's net/sched subsystem, specifically within the actgact and actpolice modules. A local user could exploit this vulnerability by providing a specially crafted control action that bypasses proper range checks. This improper handling of control actions leads to an...