CVE-2026-90072

A flaw was found in the Linux kernel. A local user with CAPNETADMIN privileges in a user namespace can configure a network device with an excessively large Maximum Transmission Unit MTU. This leads to a signed integer overflow when the kernel's sfqinit function calculates a quantum value. This...

CVE-2026-90072

CVE-2026-90072 is a signed overflow vulnerability in the Linux kernel's net/sched: sfq (Stochastic Fairness Queuing) qdisc. In sfq_init(), the quantum value is set from psched_mtu(), which returns an unsigned value. A device with an extremely large MTU (e.g., a dummy device with max_mtu == 0 acce...