VulnSocial

CVE-2026-22999PoC(linux / linux_kernel)

LOWCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for linux linux_kernel systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: do not free existing class in qfq_change_class() Fixes qfq_change_class() error case. cl->qdisc and cl should only be freed if a new class and qdisc were allocated, or we risk various UAF.

linux CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Patch / fix

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Public PoC and exploit tooling are both present
  • 1 mentions across 1 observed day

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
linux
Products
linux_kernel

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-04-10: 1PoC Mentioned / Linked · 2026-04-10: 1Exploit Tool / Code · 2026-04-10: 104-10
Signal classification1 categories
PoC
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Ferramentas Linux@Cezar_H_Linux
    PoC

    Just built a Docker container to simulate the sch_qfq class bug (CVE-2026-22999). You can test the fix without owning a physical server. Lab steps in the thread . Read more👉 https://tinyurl.com/4yemj9tj #LinuxSecurity #DevOps #SUSE #EvergreenContent https://t.co/skO4pI9JYt

    Post summary

    The tweet announces a Dockerized Proof of Concept for CVE-2026-22999, providing a clickable link to a thread with lab steps to test the fix.

    0001061
    1.5K followersView on X
CPE platform detail6 entries

6 of 6 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
OSlinuxlinux_kernel6.19--
OSlinuxlinux_kernel6.19--
OSlinuxlinux_kernel6.19--
OSlinuxlinux_kernel6.19--
OSlinuxlinux_kernel6.19--

Explore more

Back to dashboardlinux CVEslinux_kernel vulnerabilities