PT-2026-61371 · Linux · Linux
CVE-2026-64054
·
Published
2026-07-19
·
Updated
2026-07-19
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
net: shaper: reject duplicate leaves in GROUP request
net shaper nl group doit() does not deduplicate NET SHAPER A LEAVES
entries. When userspace supplies the same leaf handle twice, the same
old-parent pointer lands twice in old nodes[]. The cleanup loop double
frees the parent. Of course the same parent may still be in old nodes[]
twice if we are moving multiple of its leaves.
Note that this patch also implicitly fixes the fact that the
i >= leaves count path forgets to set ret.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux