CVE Explorer

CVE-2026-43496

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked When red qdisc has children (eg qfq qdisc) whose peek() callback is qdisc_peek_dequeued(), we could get a kernel panic. When the parent of such qdiscs (eg illustrated in patch #3 as tbf) wants to retrieve an skb from its child (red in this case), it will do the following: 1a. do a peek() - and when sensing there's an skb the child can offer, th

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:5863dae2bc2ea3541ada12301eb864e37455c7b9d47657871b744d232d2f3f4c

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/sched/sch_red.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"03b0aaeba082ae981a0dfe96cdd03d02050537a1","status":"affected","version":"77be155cba4e163e8bba9fd27222a8b6189ec4f7","versionType":"git"},{"lessThan":"c7335f4dc0fa21f7015b910c6fc2f4d599732328","status":"affected","version":"77be155cba4e163e8bba9fd27222a8b6189ec4f7","versionType":"git"},{"lessThan":"45cd83c5c470ba49fe261489c8358ad7b9df7c45","status":"affected","version":"77be155cba4e163e8bba9fd272…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e4f5144e7bf868b982a10e92d2af1b15ad9b0d3299326f137f356641a31ddea5 · sha256:80ab648fefbe21f4… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/sched/sch_red.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.29"},{"lessThan":"2.6.29","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessT…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e4f5144e7bf868b982a10e92d2af1b15ad9b0d3299326f137f356641a31ddea5 · sha256:80ab648fefbe21f4… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e4f5144e7bf868b982a10e92d2af1b15ad9b0d3299326f137f356641a31ddea5 · sha256:80ab648fefbe21f4… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e4f5144e7bf868b982a10e92d2af1b15ad9b0d3299326f137f356641a31ddea5 · sha256:80ab648fefbe21f4… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/03b0aaeba082ae981a0dfe96cdd03d02050537a1"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e4f5144e7bf868b982a10e92d2af1b15ad9b0d3299326f137f356641a31ddea5 · sha256:80ab648fefbe21f4… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/36aa34f42cb6842cf371f3a2d3e855d24fd57a50"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e4f5144e7bf868b982a10e92d2af1b15ad9b0d3299326f137f356641a31ddea5 · sha256:80ab648fefbe21f4… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/458d5615272d3de535748342eb68ca492343048c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e4f5144e7bf868b982a10e92d2af1b15ad9b0d3299326f137f356641a31ddea5 · sha256:80ab648fefbe21f4… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/45cd83c5c470ba49fe261489c8358ad7b9df7c45"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e4f5144e7bf868b982a10e92d2af1b15ad9b0d3299326f137f356641a31ddea5 · sha256:80ab648fefbe21f4… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/587dcf970a525f543d8b5855d9f37a4ca97b76ef"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e4f5144e7bf868b982a10e92d2af1b15ad9b0d3299326f137f356641a31ddea5 · sha256:80ab648fefbe21f4… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/8d09618840b99ef00154d3e731ce9b11e096196d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e4f5144e7bf868b982a10e92d2af1b15ad9b0d3299326f137f356641a31ddea5 · sha256:80ab648fefbe21f4… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/c7335f4dc0fa21f7015b910c6fc2f4d599732328"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e4f5144e7bf868b982a10e92d2af1b15ad9b0d3299326f137f356641a31ddea5 · sha256:80ab648fefbe21f4… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/ce051eede433f876d322ac3550a36a3c6fc4c231"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e4f5144e7bf868b982a10e92d2af1b15ad9b0d3299326f137f356641a31ddea5 · sha256:80ab648fefbe21f4… · /containers/cna/references/4

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer