CVE-2026-90072

A flaw was found in the Linux kernel. A local user with CAPNETADMIN privileges in a user namespace can configure a network device with an excessively large Maximum Transmission Unit MTU. This leads to a signed integer overflow when the kernel's sfqinit function calculates a quantum value. This...

CVE-2026-90072 net/sched: sfq: clamp quantum to avoid signed overflow soft lockup

In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum to avoid signed overflow soft lockup sfqinit sets q-quantum = pschedmtuqdiscdevsch unsigned. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU 2147483634 makes pschedmtu return...