CVE-2026-22999: linux kernel from 3.8 (inclusive), before 5.10.249 (exclusive), from 5.11 (inclusive), before 5.15.199 (exclusive)…

Affected technology

linux kernel · from 3.8 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · 462dbc9101acd38e92eda93c0726857517a24bbd to before 2a64fb9b47afffeb5dbab5fd3a518e1436dcc90e, 462dbc9101acd38e92eda93c0726857517a24bbd to before cff6cd703f41d8071995956142729e4bba160363, 462dbc9101acd38e92eda93c0726857517a24bbd to before f06f7635499bc806cbe2bbc8805c7cef8b1edddf, 462dbc9101acd38e92eda93c0726857517a24bbd to before 0a234660dc70ce45d771cbc76b20d925b73ec160, 462dbc9101acd38e92eda93c0726857517a24bbd to before 362e269bb03f7076ba9990e518aeddb898232e50, 462dbc9101acd38e92eda93c0726857517a24bbd to before e9d8f11652fa08c647bf7bba7dd8163241a332cd, 462dbc9101acd38e92eda93c0726857517a24bbd to before 3879cffd9d07aa0377c4b8835c4f64b4fb24ac78
Linux

Linux · 3.8
Linux

Component: Not specified by the source
File: net/sched/sch_qfq.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.