CVE-2026-90073

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An integer overflow occurs in the net/sched component when handling the quantum value. The hhf init() function sets q->quantum using psched mtu() without an overflow check. On devices with an exceptionally large Maximum Transmission Unit (MTU), the calculation of weight * quantum can overflow the signed deficit within the hhf dequeue() function, leading to an infinite loop. This issue can be triggered on devices where the MTU plus hard header len wraps into the sign bit, and it requires CAP NET ADMIN privileges within a user namespace.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.