PT-2026-6175 · Linux+2 · Linux Kernel+2

Published 2026-01-01 · Updated 2026-05-22 · CVE-2026-23105

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A preventative patch was implemented to enhance code consistency and mitigate potential exploits involving child queue length (qlen) manipulations within the qfq (Queued Fair Queueing) scheduler. The patch replaces reliance on a child queue discipline's qlen to determine class activation with the use of the cl is active function. This change aims to prevent potential exploits that could arise from manipulating child qlens. The qfq rm from ag function was modified to use cl is active to determine if a class is active.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23105

ECHO-B73A-3DB3-8154

OESA-2026-1760

OPENSUSE-SU-2026:20416-1

SUSE-SU-2026:0962-1

SUSE-SU-2026:1078-1

SUSE-SU-2026:1081-1

SUSE-SU-2026:20667-1

SUSE-SU-2026:20720-1

SUSE-SU-2026:20838-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

SUSE-SU-2026:20931-1

SUSE-SU-2026:21284-1

USN-8162-1

USN-8180-1

USN-8180-2

USN-8180-3

USN-8180-4

USN-8180-5

USN-8180-6

USN-8186-1

USN-8187-1

USN-8188-1

USN-8243-1

USN-8275-1

USN-8278-1

USN-8289-1

USN-8296-1

USN-8297-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 2312

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23105.json · Exploit
• https://ubuntu.com/security/CVE-2026-23083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71137 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40055 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68813 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23148 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40030 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23123 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40149 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23032 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23209 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68309 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23138 · Security Note
• https://ubuntu.com/security/CVE-2025-40194 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71111 · Vendor Advisory