PT-2026-30144 · Linux · Linux Kernel
Published
2026-04-03
·
Updated
2026-05-03
·
CVE-2026-23449
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 7.0.0-rc3 through 7.0.0-rc3
Description
The Linux kernel contains a flaw in the TEQL (Traffic Equation Queue Length) scheduler. Specifically, a double-free issue exists in the
teql master xmit function when a TEQL device has a lockless Qdisc as its root. This can lead to crashes, as demonstrated by a KASAN (Kernel Address Sanitizer) report indicating a double-free in skb release data. The issue arises from failing to call qdisc reset with the seq lock to avoid racing with the datapath. The crash can occur during the destruction of the TEQL device, potentially triggered by operations like tc get qdisc or qdisc graft. The skb release data function is involved in the memory management of network packets (skbs), and the double-free corrupts memory, leading to system instability.Recommendations
Update to a newer kernel version that contains a fix for this vulnerability.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel