CVE-2026-23437
net: shaper: protect late read accesses to the hierarchy
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
6th
In the Linux kernel, the following vulnerability has been resolved: net: shaper: protect late read accesses to the hierarchy We look up a netdev during prep of Netlink ops (pre- callbacks) and take a ref to it. Then later in the body of the callback we take its lock or RCU which are the actual protections. This is not proper, a conversion from a ref to a locked netdev must include a liveness check (a check if the netdev hasn't been unregistered already). Fix the read cases (those under RCU). Writes needs a separate change to protect from creating the hierarchy after flush has already run.
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Apr 3, 2026 |
| Last Updated | Apr 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Linux / Linux
4b623f9f0f59652ea71fcb27d60b4c3b65126dbb < 581eee0890a8bde44f1fb78ad3e70502a897d583 4b623f9f0f59652ea71fcb27d60b4c3b65126dbb < 348758ba74e6a348299965b16a97cfb817545cc0 4b623f9f0f59652ea71fcb27d60b4c3b65126dbb < 0f9ea7141f365b4f27226898e62220fb98ef8dc6
Linux / Linux
6.13