CVE-2026-46331

PACKETEDITMEME - CVE-2026-46331 net/sched actpedit partielle-COW Page-Cache-Korruption Verursacher 899ee91156e5, vorhanden v5.18 .. gefixt v7.1-rc7. packeteditmeme.c wandelt dies in einen unprivilegierten lokalen Root-Zugriff um: Ein userns CAPNETADMIN Kindprozess überschreibt die...

cve-2026-46331-audit

cve-2026-46331-audit Script di audit di sola lettura per CVE-2026-46331 alias pedit COW — un bug parziale copy-on-write nell'azione net/sched actpedit del kernel Linux che consente a un utente locale non privilegiato di corrompere la memoria della cache delle pagine ed escalare a root...

CVE-2026-46331

🚨 CVE-2026-46331 - Bug COW del Kernel Linux Kernel Linux net/sched Corruzione della Cache delle Pagine per Copy-on-Write COW Parziale -orange?style=for-the-badge Una vulnerabilità del kernel Linux causata da una gestione errata del Copy-on-Write COW nel sottosistema di modifica dei pacchetti del...

packet_edit_meme

PACKETEDITMEME - alias CVE-2026-46331 net/sched actpedit corruption partielle du cache de pages par COW coupable 899ee91156e5, présent v5.18 .. corrigé v7.1-rc7. packeteditmeme.c le transforme en root local non privilégié : un enfant userns CAPNETADMIN écrase l'entrée ELF en cache du /bin/su...

CVE-2026-68138

CVE-2026-68138 — Tracking-Site für die Linux-Kernel-net/sched-qdisc-Rate-Table-UAF Quelle für den CVE-2026-68138 -Patch-Status-Tracker: eine Single-Page-Website, die festhält, welche Distributionen einen Fix für den Use-after-free / Double-Free der net/sched-qdisc-Rate-Table im Linux-Kernel...

CVE-2026-74620

A flaw was found in the Linux kernel's net/sched subsystem, specifically within the actgact and actpolice modules. A local user could exploit this vulnerability by providing a specially crafted control action that bypasses proper range checks. This improper handling of control actions leads to an...

Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.124 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

SUSE CVE-2026-74594

In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpolltimer in psicgroupfree psischedulertpollwork is called locklessly from the scheduler hotpath and can race psitriggerdestroy taking down the last rtpoll trigger under rtpolltriggerlock:...

CVE-2026-74663

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path, so a...

CVE-2026-74663 net/sched: reject overly deep qdisc hierarchies

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path, so a...

CVE-2026-74663

CVE-2026-74663 affects the Linux kernel in the net/sched subsystem. Deep queueing discipline (qdisc) hierarchies can cause excessive recursion in qdisc tree walkers, exhausting the kernel stack and leading to a Denial of Service via system crash. The existing loop check does not cover the create-...

CVE-2026-74621 net/sched: act_ct: fix sk_buff leak when the header checks reject a packet

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix skbuff leak when the header checks reject a packet tcfcthandlefragments runs its header sanity checks before handing anything to the defragmentation engine: if family == NFPROTOIPV4 err =...

CVE-2026-74621

CVE-2026-74621 is an unbounded memory leak in the Linux kernel's net/sched: act_ct (traffic control connection-tracking action). When tcf_ct_handle_fragments() rejects a packet via header sanity checks (returning -EINVAL, -ENOMEM, or -EPROTO), the skb remains owned by the caller, yet tcf_ct_act()...

EUVD-2026-64531

In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpolltimer in psicgroupfree psischedulertpollwork is called locklessly from the scheduler hotpath and can race psitriggerdestroy taking down the last rtpoll trigger under rtpolltriggerlock:...

CVE-2026-74594

CVE-2026-74594 affects the Linux kernel's PSI (Pressure Stall Information) subsystem . A race condition exists between psi_schedule_rtpoll_work(), called locklessly from the scheduler hotpath, and psi_trigger_destroy(), which tears down the last rtpoll trigger under lock. The rtpoll_timer can be ...

PT-2026-79736

In the Linux kernel, the following vulnerability has been resolved: sched ext: Skip sub-disable teardown for never-linked sub-schedulers A sub-scheduler enable can fail before scx link sched links the sched into the hierarchy, e.g. when the parent is already being disabled, and cleanup still runs...

Linux Distros Unpatched Vulnerability : CVE-2026-74663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The...

Linux Distros Unpatched Vulnerability : CVE-2026-74700

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsapi: Always acquire rtnllock when destroying locked classifiers Another challenge with unlocked filters. There is a short window in tcnewtfilter...

PT-2026-79626

In the Linux kernel, the following vulnerability has been resolved: net/sched: act ct: fix sk buff leak when the header checks reject a packet tcf ct handle fragments runs its header sanity checks before handing anything to the defragmentation engine: if family == NFPROTO IPV4 err = tcf ct ipv4 i...

Linux Distros Unpatched Vulnerability : CVE-2026-74621

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actct: fix skbuff leak when the header checks reject a packet tcfcthandlefragments runs its header sanity checks before handing anything to the...