CVE-2026-53079: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: net_sched: fix skb memory leak in deferred qdisc drops When the network stack cleans up the deferred list via qdisc_run_end(), it operates on the root qdisc. If the root qdisc do not implement the TCQ_F_DEQUEUE_DROPS flag the packets queue to free are never freed and gets stranded on the child's local to_free list. Fix this by making qdisc_dequeue_drop() aware of the root qdisc. It fetches the root qdisc and check for the TCQ_F_DEQUEUE_DROPS flag. If the flag is present, the packet is appended directly to the root's to_free list. Otherwise, drop it directly as it was done before the optimization was implemented.

Засегнати продукти

• Linux Linux: a6efc273ab8245722eee2150fa12cf75781dc410 преди bf26ad92ffda7884825d67b46bd5efe615c3babf; a6efc273ab8245722eee2150fa12cf75781dc410 преди a6bd339dbb3514bce690fdcf252e788dfab4ee76
• Linux Linux: 6.19; преди 6.19; 7.0.10 до 7.0.*; от 7.1 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-53079
• https://nvd.nist.gov/vuln/detail/CVE-2026-53079
• https://git.kernel.org/stable/c/bf26ad92ffda7884825d67b46bd5efe615c3babf
• https://git.kernel.org/stable/c/a6bd339dbb3514bce690fdcf252e788dfab4ee76