CVE-2026-23105: net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag
In the Linux kernel, the following vulnerability has been resolved:
net/sched: qfq: Use clisactive to determine whether class is active in qfqrmfromag
This is more of a preventive patch to make the code more consistent and to prevent possible exploits that employ child qlen manipulations on qfq. use clisactive instead of relying on the child qdisc's qlen to determine class activation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23105?
CVE-2026-23105 is classified as a preventive patch without a critical severity, primarily targeting code reliability.
How do I fix CVE-2026-23105?
To fix CVE-2026-23105, update your Linux kernel to the latest version that contains the resolved patches.
What software versions are affected by CVE-2026-23105?
CVE-2026-23105 affects certain versions of the Linux kernel where the qfq_rm_from_ag function resides.
What does CVE-2026-23105 address?
CVE-2026-23105 addresses the use of cl_is_active to properly determine if a class is active, improving the qfq scheduler's code integrity.
Can CVE-2026-23105 be exploited remotely?
CVE-2026-23105 is not specifically identified as having remote exploit capabilities, as it focuses on internal scheduling improvements.