95 matches found
EUVD-2026-86665
In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum in change path sfqchange accepts any non-negative quantum only rejects intctl-quantum 120 with -EINVAL, matching fqcodelchange and the init clamp. Conditions to recreate the bug: CONFIGNETSCHSFQ=y...
CVE-2026-98012
In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum in change path sfqchange accepts any non-negative quantum only rejects intctl-quantum 120 with -EINVAL, matching fqcodelchange and the init clamp. Conditions to recreate the bug: CONFIGNETSCHSFQ=y...
CVE-2026-98012
The Linux kernel contains a vulnerability in the net/sched: sfq component where the sfq_change() function fails to properly restrict the quantum value. By providing a crafted size table causing qdisc_pkt_len to reach approximately 2 GiB, an attacker can set quantum=1 to trigger a deficit-refill l...
Linux Distros Unpatched Vulnerability : CVE-2026-90072
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: sfq: clamp quantum to avoid signed overflow soft lockup sfqinit sets q-quantum = pschedmtuqdiscdevsch unsigned. A device with a huge MTU e.g. dummy...
DEBIAN-CVE-2026-90072
In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum to avoid signed overflow soft lockup sfqinit sets q-quantum = pschedmtuqdiscdevsch unsigned. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU 2147483634 makes pschedmtu return...
AZL-102920 CVE-2026-90072 affecting package kernel 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum to avoid signed overflow soft lockup sfqinit sets q-quantum = pschedmtuqdiscdevsch unsigned. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU 2147483634 makes pschedmtu return...
CVE-2026-90072
CVE-2026-90072 is a signed overflow vulnerability in the Linux kernel's net/sched: sfq (Stochastic Fairness Queuing) qdisc. In sfq_init(), the quantum value is set from psched_mtu(), which returns an unsigned value. A device with an extremely large MTU (e.g., a dummy device with max_mtu == 0 acce...
CVE-2026-90072 net/sched: sfq: clamp quantum to avoid signed overflow soft lockup
In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum to avoid signed overflow soft lockup sfqinit sets q-quantum = pschedmtuqdiscdevsch unsigned. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU 2147483634 makes pschedmtu return...
CVE-2026-90072 net/sched: sfq: clamp quantum to avoid signed overflow soft lockup
In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum to avoid signed overflow soft lockup sfqinit sets q-quantum = pschedmtuqdiscdevsch unsigned. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU 2147483634 makes pschedmtu return...
EUVD-2026-81933
In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum to avoid signed overflow soft lockup sfqinit sets q-quantum = pschedmtuqdiscdevsch unsigned. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU 2147483634 makes pschedmtu return...
CVE-2026-90072: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum to avoid signed overflow soft lockup sfqinit sets q-quantum = pschedmtuqdiscdevsch unsigned. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU 2147483634 makes pschedmtu return...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: netsched: schsfq: rejecting invalid perturb periods. Gerrard Tai reported that the perturbperiod of SFQ does not have a range check yet, and this could be exploited to trigger a race condition, which has been fixed in a separa...
ShadowNet v11.1.0
Big Thanks to Jesus for making this gain attention! Turn to Jesus before it's too late. : He loves You To even further enhance your privacy and security; Use ShadowNet on your Host OS & Run Whonix in a VM to browse the web. Download Whonix here: https://www.whonix.org/ Please use a secure VM...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098686)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098686 advisory. In the Linux kernel, the following vulnerability has been resolved: netsched: schsfq: fix a potential crash on gsoskb handling SFQ has an assumption of always being...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098689)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098689 advisory. In the Linux kernel, the following vulnerability has been resolved: netsched: schsfq: reject invalid perturb period Gerrard Tai reported that SFQ perturbperiod has n...
SUSE-SU-2026:0385-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47633: ath5k: fix OOB in ath5keepromreadpcalinfo5111 bsc1237768. - CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream...
Azure Linux 3.0 Security Update: kernel (CVE-2024-57996)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57996 advisory. - In the Linux kernel, the following vulnerability has been resolved: netsched: schsfq: don't allow 1 packet...
Azure Linux 3.0 Security Update: kernel (CVE-2025-38193)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38193 advisory. - In the Linux kernel, the following vulnerability has been resolved: netsched: schsfq: reject invalid perturb...
TencentOS Server 4: kernel (TSSA-2025:0347)
"The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0347 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilitie...