PT-2026-61329 · Linux · Linux Kernel

CVE-2026-64012 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the sch sfb component of the network scheduler. When sfb has children, such as a qfq qdisc, a kernel panic can occur due to a null-pointer dereference. This happens when a parent qdisc (e.g., tbf) attempts to retrieve a socket buffer (skb) from its child (sfb). The process involves a peek() call followed by a dequeue() call. If the child's peek() callback is qdisc peek dequeued(), the sfb component incorrectly calls the child's dequeue() function directly instead of retrieving the packet from the gso skb queue, leading to the crash in the qfq dequeue() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-64012

Affected Products

Linux Kernel

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-64012 · Security Note
• https://git.kernel.org/stable/c/e125f5980b730c67c92a30cf150ec8c3d6777318 · Note
• https://git.kernel.org/stable/c/9ad3288632c859cf84183199832d822e7a70bdae · Note
• https://git.kernel.org/stable/c/dbc560858da8b77dd9e4ef0cd93d421e0e4d7e0e · Note
• https://git.kernel.org/stable/c/6c153d97c100f5b282c424101d8ff63122306997 · Note
• https://git.kernel.org/stable/c/1e70274d3b81de28973bcdbce40a512bcb181ff9 · Note
• https://twitter.com/CVEnew/status/2078861416593813524 · Twitter Post
• https://git.kernel.org/stable/c/1b9bc71153b01dbde8045b9edede4240f4f5520e · Note
• https://git.kernel.org/stable/c/84bfbfc0c48731bcce74cdf4f9c497547ec525e0 · Note
• https://git.kernel.org/stable/c/e5ea51e5f3fbba41d50cd84a530f33bc1c8f4d57 · Note