VulnSocial

CVE-2026-99167

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in __tcf_action_put() __tcf_action_put() decrements the reference count before decrementing the binding count. Another thread can free the action between these operations, causing the binding-count update to access freed memory. KASAN reports it as: BUG: KASAN: slab-use-after-free in __tcf_action_put+0x327/0x340 Write of size 4 at addr ff11000000d46420 by task tc-put-pause/64 Hold the action IDR mutex across both counter updates and IDR removal, keeping cleanup outside the lock.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-11-01: 111-01
Full discourse1 post
  • m.shiono@shioccii

    【Linux 直近1ヶ月のHigh脆弱性まとめ(10/2〜11/2)】
※公式情報で確認できた分のみ。全件網羅ではありません ■カーネル
・Fragnesia(XFRM ESP-in-TCP)/ ローカル権限昇格 / CVE-2026-46300 / CVSS 7.8 / CISA KEVに10/28追加(悪用確認済み)
・smbクライアントのヒープオーバーフロー / CVE-2026-99110 / CVSS 7.8
・net/schedのUse-After-Free / CVE-2026-99167 / CVSS 7.8
・pfcpのSEID境界外読み取り / CVE-2026-98952 / CVSS 7.5
・TCP(IPv4)のUse-After-Free / CVE-2026-98432 / CVSS 9.8(カーネルCNA評価はCritical。Red Hatは8.1または5.9と評価が割れている。) ■ユーザーランド(Red Hat公式 10/23〜10/27公開分のみ確認)
・xdg-desktop-portal ファイルアクセス不備 / CVE-2026-55888 / CVSS 8.2
・Samba アクセス制御バイパス / CVE-2026-109411 / CVSS 8.1
・WebKit2GTK 任意コード実行 / CVE-2026-112655 / CVSS 8.8
・libgsf ヒープオーバーフロー / CVE-2026-116124 / CVSS 7.8
・ImageMagick(RHEL 6/7のみ)メモリ破壊 / CVE-2026-116149 / CVSS 7.8
・libimobiledevice double free / CVE-2026-116260 / CVSS 7.3
・rapidjson 境界外読み取りDoS / CVE-2026-116620 / CVSS 7.5
・fltk BMP処理で任意コード実行 / CVE-2026-116723・CVE-2026-116724 / CVSS 7.8 出典:Red Hat Customer Portal、CISA KEV

    121114.5K
    275 followersView on X

Explore more

Back to dashboard