CVE-2026-64054

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the network shaper component where the net shaper nl group doit() function fails to deduplicate NET SHAPER A LEAVES entries. If a user provides the same leaf handle multiple times, the same old-parent pointer is added to the old nodes[] array more than once. This leads to a double free of the parent during the cleanup process. Additionally, the issue involves a failure to set the return value ret when the index i is greater than or equal to leaves count.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.