CVE-2026-90072

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A signed overflow issue exists in the Stochastic Fairness Queueing (sfq) scheduler. When sfq init() sets the q->quantum value using psched mtu(), a device with an excessively large Maximum Transmission Unit (MTU) can cause psched mtu() to return a value that wraps into the sign bit (e.g., 0x80000000). This results in slot->allot becoming INT MIN, causing the sfq dequeue() function to enter an infinite loop while holding the qdisc lock, leading to a soft lockup. This condition can be triggered by a user with CAP NET ADMIN privileges in a user namespace using a device where the MTU plus hard header length causes this wrap-around.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.