Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-23105

net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag This is more of a preventive patch to make the code more consistent and to prevent possible exploits that employ child qlen manipulations on qfq. use cl_is_active instead of relying on the child qdisc's qlen to determine class activation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 462dbc9101acd38e92eda93c0726857517a24bbd to < fac2c67bb2bb732eae4283e45fc338af7e08c254affected
  • 462dbc9101acd38e92eda93c0726857517a24bbd to < b8c24cf5268fb3bfb8d16324c3dbb985f698c835affected
  • 462dbc9101acd38e92eda93c0726857517a24bbd to < f27047abf7cac1b6f90c3ad60de21ef9f717c26daffected
  • 462dbc9101acd38e92eda93c0726857517a24bbd to < 93b8635974fb050c43d07e35e5edfe6e685ca28aaffected
  • 462dbc9101acd38e92eda93c0726857517a24bbd to < abd9fc26ea577561a5ef6241a1b058755ffdad0caffected
  • 462dbc9101acd38e92eda93c0726857517a24bbd to < 77f1afd0bb4d5da95236f6114e6d0dfcde187ff6affected
  • 462dbc9101acd38e92eda93c0726857517a24bbd to < d837fbee92453fbb829f950c8e7cf76207d73f33affected

Linux Linux

Default version status: affected

  • 3.8affected
  • 0 to < 3.8unaffected
  • 5.10.249 to ≤ 5.10.*unaffected
  • 5.15.199 to ≤ 5.15.*unaffected
  • 6.1.162 to ≤ 6.1.*unaffected
  • 6.6.122 to ≤ 6.6.*unaffected
  • 6.12.68 to ≤ 6.12.*unaffected
  • 6.18.8 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References