Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks As Paolo said earlier [1]: "Since the blamed commit below, classify can return TC_ACT_CONSUMED while the current skb being held by the defragmentation engine. As reported by GangMin Kim, if such packet is that may cause a UaF when the defrag engine later on tries to tuch again such packet." act_ct was never meant to be used in the egress path, however some users are attaching it to egress today [2]. Attempting to reach a middle ground, we noticed that, while most qdiscs are not handling TC_ACT_CONSUMED, clsact/ingress qdiscs are. With that in mind, we address the issue by only allowing act_ct to bind to clsact/ingress qdiscs and shared blocks. That way it's still possible to attach act_ct to egress (albeit only with clsact). [1] https://lore.kernel.org/netdev/674b8cbfc385c6f37fb29a1de08d8fe5c2b0fbee.1771321118.git.pabeni@redhat.com/ [2] https://lore.kernel.org/netdev/[email protected]/
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-18 | 2 | Disclosure1Patch1 |
| 2026-04-26 | 1 | General1 |
CVE-2026-23270: Linux Kernel Traffic Control Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04dsYdq0
Post summary
The post highlights CVE-2026-23270, a Linux Kernel traffic control bug, and outlines its business implications and response guidelines, but does not provide detailed exploit, patch, or PoC information.
CVE-2026-23270 In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks As Paolo said ea… https://www.cve.org/CVERecord?id=CVE-2026-23270
Post summary
The post notes that CVE‑2026‑23270, a Linux kernel network scheduler issue, has been fixed with a patch—no exploit or PoC is mentioned, and there is no evidence of active exploitation.
There is a new vulnerability with elevated criticality in Linux Kernel (CVE-2026-23270) https://vuldb.com/?id.351556
Post summary
The text announces the existence of a newly identified critical Linux kernel vulnerability (CVE-2026-23270) with a reference to a vulnerability database, but does not provide technical, exploit, or remediation details.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |