CVE-2026-52997

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the dualpi2 change() function within the sch dualpi2 module. When a configuration change occurs for the dualpi2 qdisc (queueing discipline), the function fails to correctly enforce updated limit and memlimit values. Specifically, the function attempts to dequeue packets only via the root qdisc (C-queue) and assumes a valid socket buffer (skb) will always be returned. If packets are queued in the L-queue while the C-queue is empty, a NULL skb dereference occurs during the enforcement of memory or packet limits.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.