CVE-2026-22999

Published: Jan 25, 2026Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: do not free existing class in qfq_change_class() Fixes qfq_change_class() error case. cl->qdisc and cl should only be freed if a new class and qdisc were allocated, or we risk various UAF.

Affected (11)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 3.8 to 5.10.249
Linux Linux Kernel	From 5.11 to 5.15.199
Linux Linux Kernel	From 5.16 to 6.1.162
Linux Linux Kernel	From 6.13 to 6.18.7
Linux Linux Kernel	From 6.2 to 6.6.122
Linux Linux Kernel	From 6.7 to 6.12.67
Linux Linux Kernel	Version 6.19 rc1
Linux Linux Kernel	Version 6.19 rc2
Linux Linux Kernel	Version 6.19 rc3
Linux Linux Kernel	Version 6.19 rc4
Linux Linux Kernel	Version 6.19 rc5