Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netsched: drr: A double addition was corrected in the class, where netem is a child qdisc. As described in Gerrard’s report 1, there are use cases where a netem child qdisc can make the parent qdisc’s enqueue callback reentrant. ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fixed a race condition in qfqaggregate. A race condition can occur when qfqchangeagg is modified called during qfqenqueue while other threads access it concurrently. For example, qfqdumpclass may trigger a NULL...

Astra Linux – Vulnerability in Linux 5.10, Linux

The atmtcenqueue function in the net/sched/schatm.c file of the Linux kernel, as of version 6.1.4, allows attackers to cause a denial of service due to type confusion. In some cases, non-negative numbers can indicate a TCACTSHOT condition instead of valid classification results...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/sched: ets: fixed a divide-by-zero issue in the offload path Offloading ETS requires calculating the WRR weight for each class. This is done by averaging the sums of quanta, denoted as ‘qsum’ and ‘qpsum’. Using unsigned in...

The vulnerability of the netem_enqueue() function in the net/sched/sch_netem.c module of the Linux operating system’s network scheduling subsystem allows a attacker to cause a service failure.

The vulnerability of the netemenqueue function in the net/sched/schnetem.c module of the Linux operating system’s network scheduling subsystem is related to unlimited resource allocation. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of the dualpi2_change() function in the net/sched/sch_dualpi2.c module of the network/scheduling subsystem of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dualpi2change function in the net/sched/schdualpi2.c module of the network/scheduling subsystem of the Linux operating system is related to the swapping of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the tcf_blockcast_redir() function in the net/sched/act_mirred.c module of the network scheduling subsystem of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tcfblockcastredir function in the net/sched/actmirred.c module of the network scheduling subsystem of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to caus...

The vulnerability of the fw_classify() function in the net/sched/cls_fw.c module of the network scheduling subsystem of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the fwclassify function in the net/sched/clsfw.c file of the network scheduling subsystem in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260826-73-0015

The vulnerability of the fqresize function in the net/sched/schfq.c module of the network scheduling subsystem of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098693)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098693 advisory. In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a potential UAF in hfscdequeue too Similarly to the previous patch, we need t...

CVE-2026-72035

In the Linux kernel, the following vulnerability has been resolved: net/sched: schtaprio: Replace direct dequeue call with peek and qdiscdequeuepeeked When taprio's software path peeks a non-work-conserving child qdisc, the child stashes the peeked skb in its gsoskb; tapriodequeuefromtxq then tak...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: rtnetlink: add missing netlinknscapable check for peer netns CVE-2026-31692 kernel: netfilter: ctnetlink: ensure safe access to master conntrack CVE-2026-43116 kernel: fanotify: fix false...

ALSA-2026:49212 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 kernel: tipc: fix double-free in tipcbufappend CVE-2026-52993 kernel: net: sched: UAF via missing handler for TCACTCONSUM...

RHEL 9 : kernel-rt (RHSA-2026:48222)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:48222 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements...

net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle

...

EUVD-2026-46015

In the Linux kernel, the following vulnerability has been resolved: net/sched: dualpi2: fix GSO backlog accounting When DualPI2 splits a GSO skb into N segments, it propagates N additional packets to its parent before returning NETXMITSUCCESS. The parent then accounts for the original skb once...

CVE-2026-64207 net/sched: dualpi2: fix GSO backlog accounting

In the Linux kernel, the following vulnerability has been resolved: net/sched: dualpi2: fix GSO backlog accounting When DualPI2 splits a GSO skb into N segments, it propagates N additional packets to its parent before returning NETXMITSUCCESS. The parent then accounts for the original skb once...

CVE-2026-63981

CVE-2026-63981 — Linux kernel net/sched act_mirred blockcast recursion fix . The issue arises in tcf_mirred_act() where, on a blockcast path (tcfm_blockid != 0), the recursion counter sched_mirred_nest isn’t incremented before calling tcf_blockcast(), allowing MIRRED_NEST_LIMIT to be bypassed and...

EUVD-2026-45754

In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: Fix blockcast recursion bypass leading to stack overflow tcfmirredact checks schedmirrednest against MIRREDNESTLIMIT 4 to prevent deep recursion. However, when the action uses blockcast tcfmblockid != 0, the...