CVE-2026-98017

UNKNOWN 0.0

net/sched: defer qdisc freeing after failed creation

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

In the Linux kernel, the following vulnerability has been resolved: net/sched: defer qdisc freeing after failed creation An RTM_NEWQDISC request can make clsact bind a populated shared ingress block during ->init(), publishing an embedded mini_Qdisc to lockless readers. If the same request has an invalid TCA_RATE, estimator setup fails after ->init(); the unwind removes the pointer but synchronously frees its containing qdisc while tc_run() may still hold it. Retire failed qdiscs through the same RCU helper as normal destruction. Inline the synchronous free into the callback now that no direct callers remain.

Vendor	linux
Product	linux
Ecosystems	Linux Kernel
Industries	Technology
Published	Sep 25, 2026

Stay Ahead of the Next One

Get instant alerts for linux linux

Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Linux / Linux

51ab2994c387c80b45caf8b8067b3f3b97771d25 < 20bf6fa34b345333971bd4464a322cce87b83f4e 51ab2994c387c80b45caf8b8067b3f3b97771d25 < 156a3bab69744e9225bb9eff8c5cc53da18d5a2e 51ab2994c387c80b45caf8b8067b3f3b97771d25 < 5bfe927c5b4b290fad529186218c728589b4b101 51ab2994c387c80b45caf8b8067b3f3b97771d25 < e6662f2100f8d33b0f4d0047c219efd6bba186ea

Linux / Linux

4.16

References

NVD ↗ CVE.org ↗ EPSS Data ↗

git.kernel.org: https://git.kernel.org/stable/c/20bf6fa34b345333971bd4464a322cce87b83f4e git.kernel.org: https://git.kernel.org/stable/c/156a3bab69744e9225bb9eff8c5cc53da18d5a2e git.kernel.org: https://git.kernel.org/stable/c/5bfe927c5b4b290fad529186218c728589b4b101 git.kernel.org: https://git.kernel.org/stable/c/e6662f2100f8d33b0f4d0047c219efd6bba186ea