CVE-2026-90053

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the packet classification path where the htb classify() function does not bound the number of hops when following filter-selected inner classes. A filter on an inner class can point back to itself or another inner class, creating an infinite loop. This occurs while the qdisc lock is held and Bottom Half (BH) processing is disabled, which can lead to a soft lockup or a kernel panic triggered by a single packet. This state is reachable by an unprivileged user with CAP NET ADMIN privileges via unshare -Urn.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.