PT-2026-70955

CVE-2026-68441

·

Published

2026-08-12

·

Updated

2026-10-16

Description by

CVSS 4.0
1.8
Low
MetricsAV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the network scheduler where TC filters attached to a qdisc filter chain fail to handle the TC ACT REDIRECT verdict. This occurs when an eBPF program calls the bpf redirect() function or an act bpf action is used. Instead of being redirected, packets are enqueued normally, causing the redirect to be silently lost. Additionally, in certain configurations, the bpf redirect() function can trigger a NULL pointer dereference in the bpf net ctx get ri() function if the bpf net context is not properly set up in the task struct member.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
AZL-95504
OPENSUSE-SU-2026:22091-1
SUSE-SU-2026:24179-1
SUSE-SU-2026:24181-1
SUSE-SU-2026:24182-1
SUSE-SU-2026:24184-1
SUSE-SU-2026:24197-1
SUSE-SU-2026:24235-1
SUSE-SU-2026:24315-1
SUSE-SU-2026:24316-1
SUSE-SU-2026:4640-1
SUSE-SU-2026:4706-1
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
Found an issue in the description? Have something to add? Feel free to write us 👾