CVE-2026-90099: Linux 2.6.18

Affected technology

Linux · 0da974f4f303a6842516b764507e3c0a03f41e5a to before 68fb30607169c92de57c5c82b6af8a733af1cc09, 0da974f4f303a6842516b764507e3c0a03f41e5a to before 18c68c8f3d3ff0a4def1391021b439c4333a6c71, 0da974f4f303a6842516b764507e3c0a03f41e5a to before 1beb81947eb486716af80db7a584f9e9fef7e003
Linux

Linux · 2.6.18
Linux

Component: Not specified by the source
File: net/sched/cls_api.c, net/sched/cls_basic.c, net/sched/cls_bpf.c, net/sched/cls_cgroup.c, net/sched/cls_flow.c, net/sched/cls_flower.c, net/sched/cls_fw.c, net/sched/cls_matchall.c, net/sched/cls_route.c, net/sched/cls_u32.c

What an attacker can do

Unprivileged users can pin kernel memory outside memcg charging.