CVE-2026-22987: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy syzbot reported a crash in tc_act_in_hw() during netns teardown where tcf_idrinfo_destroy() passed an ERR_PTR(-EBUSY) value as a tc_action pointer, leading to an invalid dereference. Guard against ERR_PTR entries when iterating the action IDR so teardown does not call tc_act_in_hw() on an error pointer.

Засегнати продукти

• Linux Linux: 84a7d6797e6a03705e6b48c613fa424662049d87 преди 67550a1130b647bb0d093c9c0a810c69aa6a30a8; 84a7d6797e6a03705e6b48c613fa424662049d87 преди adb25a46dc0a43173f5ea5f5f58fc8ba28970c7c
• Linux Linux: 6.17; преди 6.17; 6.18.6 до 6.18.*; от 6.19 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-22987
• https://nvd.nist.gov/vuln/detail/CVE-2026-22987
• https://git.kernel.org/stable/c/67550a1130b647bb0d093c9c0a810c69aa6a30a8
• https://git.kernel.org/stable/c/adb25a46dc0a43173f5ea5f5f58fc8ba28970c7c