CVE-2026-72035

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the sch taprio component of the network scheduler. When the software path peeks a non-work-conserving child qdisc (queueing discipline), the child stashes the peeked skb (socket buffer) in its gso skb. The taprio dequeue from txq() function then attempts to retrieve the packet using a direct dequeue() call, which ignores the stash. This process orphans the peeked skb and causes a desynchronization of the child's qlen and backlog. If a qfq child is used, this leads to a NULL pointer dereference on an emptied list, resulting in a kernel panic during softirq on ordinary egress.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.