Boletines de Vulnerabilidades

CVE-2026-22999

   
Software afectado LINUX KERNEL
 
In the Linux kernel, the following vulnerability has been resolved:

net/sched: sch_qfq: do not free existing class in qfq_change_class()

Fixes qfq_change_class() error case.

cl->qdisc and cl should only be freed if a new class and qdisc
were allocated, or we risk various UAF.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-22999