CVE-2026-98427: Linux 3.5

Affected technology

Linux · 76e3cc126bb223013a6b9a0e2a51238d1ef2e409 to before bacd72289d34d8c05b7de5a12448b87b6dd93878, 76e3cc126bb223013a6b9a0e2a51238d1ef2e409 to before 7f4a5ec6258fd7c92633ec4b0493fc51166d9398
Linux

Linux · 3.5
Linux

Component: Not specified by the source
File: include/net/codel.h, include/net/codel_impl.h

What an attacker can do

The source says for very small intervals the scheduled step rounds down to zero, so the dropping loop in codel_dequeue() never advances and drains the entire backlog under the qdisc lock in one call - an unprivileged user can trigger a soft lockup this way.