CVE-2026-64012

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the sch sfb component of the network scheduler. When sfb has children, such as a qfq qdisc, a kernel panic can occur due to a null-pointer dereference. This happens when a parent qdisc (e.g., tbf) attempts to retrieve a socket buffer (skb) from its child (sfb). The process involves a peek() call followed by a dequeue() call. If the child's peek() callback is qdisc peek dequeued(), the sfb component incorrectly calls the child's dequeue() function directly instead of retrieving the packet from the gso skb queue, leading to the crash in the qfq dequeue() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.