CVE 7.8 HIGH

net/sched: act_gate: snapshot parameters with RCU on replace_CVE-2026-23245

7.8 / 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved:

net/sched: act_gate: snapshot parameters with RCU on replace

The gate action can be replaced while the hrtimer callback or dump path is
walking the schedule list.

Convert the parameters to an RCU-protected snapshot and swap updates under
tcf_lock, freeing the previous snapshot via call_rcu(). When REPLACE omits
the entry list, preserve the existing schedule so the effective state is
unchanged.

Basic Information

ID CVE-2026-23245
Source Linux
Published Mar 18, 2026 at 10:05
Modified Apr 2, 2026 at 14:43

Affected Product

Vendor Linux
Product Linux
Version a51c328df3106663879645680609eb49b3ff6444
Affected Versions Linux Linux a51c328df3106663879645680609eb49b3ff6444
Linux Linux a51c328df3106663879645680609eb49b3ff6444
Linux Linux a51c328df3106663879645680609eb49b3ff6444
Linux Linux a51c328df3106663879645680609eb49b3ff6444
Linux Linux a51c328df3106663879645680609eb49b3ff6444
Linux Linux a51c328df3106663879645680609eb49b3ff6444
Linux Linux 5.8

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.