CVE-2026-90109

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the network scheduler where the gred enqueue(), bfifo enqueue(), and plug enqueue() functions perform 32-bit calculations when checking if a packet fits within the queue limit. Because sch->qstats.backlog and q->backlog are u32 and packet lengths are unsigned int, the sum wraps at 2^32 once the true backlog exceeds 4 GiB. This causes the admission check to succeed incorrectly, allowing the queue to grow without bound and potentially leading to an Out-of-Memory (OOM) state. This condition requires root privileges and a specific configuration where the queue limit is near 4 GiB.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.