12 matches found
SUSE CVE-2026-90053
In the Linux kernel, the following vulnerability has been resolved: net/sched: schhtb: limit htbclassify inner-class filter hops htbclassify follows each filter-selected inner class by switching to cl-filterlist, but never bounds the number of hops. A filter on an inner class can point back to...
Linux Distros Unpatched Vulnerability : CVE-2026-90053
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schhtb: limit htbclassify inner-class filter hops htbclassify follows each filter-selected inner class by switching to cl-filterlist, but never bound...
CVE-2026-90053
CVE-2026-90053 is a vulnerability in the Linux kernel 's HTB qdisc (net/sched: sch_htb). The function htb_classify() follows filter-selected inner classes without bounding the traversal depth, so a self-referencing or cyclic inner-class u32 filter creates an infinite loop in the packet classifica...
CVE-2026-90053 net/sched: sch_htb: limit htb_classify inner-class filter hops
In the Linux kernel, the following vulnerability has been resolved: net/sched: schhtb: limit htbclassify inner-class filter hops htbclassify follows each filter-selected inner class by switching to cl-filterlist, but never bounds the number of hops. A filter on an inner class can point back to...
EUVD-2026-81914
In the Linux kernel, the following vulnerability has been resolved: net/sched: schhtb: limit htbclassify inner-class filter hops htbclassify follows each filter-selected inner class by switching to cl-filterlist, but never bounds the number of hops. A filter on an inner class can point back to...
CVE-2026-90053 net/sched: sch_htb: limit htb_classify inner-class filter hops
In the Linux kernel, the following vulnerability has been resolved: net/sched: schhtb: limit htbclassify inner-class filter hops htbclassify follows each filter-selected inner class by switching to cl-filterlist, but never bounds the number of hops. A filter on an inner class can point back to...
CVE-2026-90053: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net/sched: schhtb: limit htbclassify inner-class filter hops htbclassify follows each filter-selected inner class by switching to cl-filterlist, but never bounds the number of hops. A filter on an inner class can point back to...
CVE-2025-37953: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: schhtb: make htbdeactivate idempotent Alan reported a NULL pointer dereference in htbnextrbnode after we made htbqlennotify idempotent. It turns out in the following case it introduced some regression: htbdequeuetree: |-...
CVE-2025-37932: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: schhtb: make htbqlennotify idempotent htbqlennotify always deactivates the HTB class and in fact could trigger a warning if it is already deactivated. Therefore, it is not idempotent and not friendly to its callers, like...
CVE-2021-47125
In the Linux kernel, the following vulnerability has been resolved: schhtb: fix refcount leak in htbparenttoleafoffload The commit ae81feb7338c "schhtb: fix null pointer dereference on a null newq" fixes a NULL pointer dereference bug, but it is not correct. Because htbgrafthelper properly handle...
CVE-2021-47125
CVE-2021-47125 concerns a Linux kernel local vulnerability due to a refcount leak in the HTB offload path. The root cause was an incorrect NULL handling around qdisc_refcount_inc in htb_parent_to_leaf_offload, which could leak references if new_q was NULL. The fix adds a NULL pointer check to gua...
CVE-2021-47125: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: schhtb: fix refcount leak in htbparenttoleafoffload The commit ae81feb7338c "schhtb: fix null pointer dereference on a null newq" fixes a NULL pointer dereference bug, but it is not correct. Because htbgrafthelper properly handle...