CVE-2026-23105: linux kernel from 3.8 (inclusive), before 5.10.249 (exclusive), from 5.11 (inclusive), before 5.15.199 (exclusive)…

Affected technology

linux kernel · from 3.8 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 462dbc9101acd38e92eda93c0726857517a24bbd to before fac2c67bb2bb732eae4283e45fc338af7e08c254, 462dbc9101acd38e92eda93c0726857517a24bbd to before b8c24cf5268fb3bfb8d16324c3dbb985f698c835, 462dbc9101acd38e92eda93c0726857517a24bbd to before f27047abf7cac1b6f90c3ad60de21ef9f717c26d, 462dbc9101acd38e92eda93c0726857517a24bbd to before 93b8635974fb050c43d07e35e5edfe6e685ca28a, 462dbc9101acd38e92eda93c0726857517a24bbd to before abd9fc26ea577561a5ef6241a1b058755ffdad0c, 462dbc9101acd38e92eda93c0726857517a24bbd to before 77f1afd0bb4d5da95236f6114e6d0dfcde187ff6, 462dbc9101acd38e92eda93c0726857517a24bbd to before d837fbee92453fbb829f950c8e7cf76207d73f33
Linux

Linux · 3.8
Linux

Component: Not specified by the source
File: net/sched/sch_qfq.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.