289 matches found
SUSE CVE-2026-98797
In the Linux kernel, the following vulnerability has been resolved: net: cap skb-queuemapping when the tx queue is picked skbedit can set skb-queuemapping and raise the per-CPU skiptxqueue flag so devqueuexmit honours the mapping. devqueuexmit cleared the flag before schhandleegress and only read...
CVE-2026-98797
In the Linux kernel, the following vulnerability has been resolved: net: cap skb-queuemapping when the tx queue is picked skbedit can set skb-queuemapping and raise the per-CPU skiptxqueue flag so devqueuexmit honours the mapping. devqueuexmit cleared the flag before schhandleegress and only read...
EUVD-2026-103882
In the Linux kernel, the following vulnerability has been resolved: net: cap skb-queuemapping when the tx queue is picked skbedit can set skb-queuemapping and raise the per-CPU skiptxqueue flag so devqueuexmit honours the mapping. devqueuexmit cleared the flag before schhandleegress and only read...
CVE-2026-98797: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: cap skb-queuemapping when the tx queue is picked skbedit can set skb-queuemapping and raise the per-CPU skiptxqueue flag so devqueuexmit honours the mapping. devqueuexmit cleared the flag before schhandleegress and only read...
PT-2026-117016
In the Linux kernel, the following vulnerability has been resolved: net: cap skb-queue mapping when the tx queue is picked skbedit can set skb-queue mapping and raise the per-CPU skip txqueue flag so dev queue xmit honours the mapping. dev queue xmit cleared the flag before sch handle egress and...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: extend minimum interval restriction to entire cycle too It is possible for syzbot to bypass the restriction imposed by the problematic commit in the “Fixes” tag, because the taprio UAPI allows a cycle time that...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: avoid disabling offload when it was never enabled In a rather strange API design decision, qdisc-destroy is called even if qdisc-init never succeeded. This isn’t exclusive to the commit 87b60cfacf9f “netsched:...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: net/sched: taprio: improper checking of the TCATAPRIOTCENTRYINDEX attribute The taprioparsetcentry function does not correctly check the TCATAPRIOTCENTRYINDEX attribute: int tc; // Signed value tc =...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCATAPRIOATTRPRIOMAP If an TCATAPRIOATTRPRIOMAP attribute is provided, the taprioparsemqprioopt function must validate it. Otherwise, arbitrary data can be injected into the kernel when the...
kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch
A flaw was found in the Linux kernel's networking scheduler, specifically within the taprio module. When the system attempts to switch schedules, a use-after-free vulnerability occurs in the advancesched function. This happens because a pointer to an old schedule entry is still used after the...
kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch
A flaw was found in the Linux kernel's networking scheduler, specifically within the taprio module. When the system attempts to switch schedules, a use-after-free vulnerability occurs in the advancesched function. This happens because a pointer to an old schedule entry is still used after the...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: net: sched: using the RCU read-side critical section in tapriodump Fixed a possible use-after-free in ‘tapriodump’ by adding the RCU read-side critical section. This issue was not encountered on x86, but was found on an arm64...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net:sched: fix use-after-free in tapriochange In tapriochange, the admin pointer may become dangling due to the sched switch/removal caused by advancesched. The critical section protected by q-currententrylock is too small to...
CVE-2026-97963
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: initialize ptplock at probe time priv-ptplock is only initialized in stmmacptpregister, which runs during stmmacopen. However, the lock is also used while the interface is down and has never been opened:...
PT-2026-98627
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the ptp lock variable is only initialized during the stmmac open process via the stmmac ptp register function. This leads to undefined behavior because the lock is...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: net/sched: schtaprio: properly canceled the timer from tapriodestroy There is a comment in qdisccreate regarding the fact that we do not call ops-reset in some cases. errout4: “Any broken qdisc instances that would require...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: In net/sched: taprio, the variable TCATAPRIOATTRSCHEDCYCLETIME is limited to INTMAX. syzkaller detected no division errors in the function divs64rem, which is called from getcycletimeelapsed. In this function, schd-cycletime serv...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: net/sched: schtaprio: fixed possible use-after-free issue. syzbot reported a serious crash 1 in nettxaction, which made no sense until we obtained a reproducible example. This example reinstalls the taprio qdisc, but an invali...
CVE-2026-72035
A flaw was found in the Linux kernel's taprio Time-Aware Priority Shaper scheduler. When the taprio software path processes network packets from a non-work-conserving child queue discipline qdisc, it can incorrectly handle the packet buffer, leading to a null pointer dereference. This issue can...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100727)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100727 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: fix use-after-free in advancesched on schedule switch In advancesched, when...