CVE-2026-74267

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the sch codel component of the network scheduler. When dropping packets during a peek operation, the system calls the qdisc tree reduce backlog() function before restoring the qlen variable. If qlen drops to zero while the peek operation still returns a socket buffer (skb), the parent's qlen notify callback is triggered prematurely. This can lead to the mistaken deactivation of the parent's class, potentially resulting in wild memory access, particularly when qfq is used as a parent of codel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.