CVE Explorer

CVE-2026-64012

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked When sfb has children (eg qfq qdisc) whose peek() callback is qdisc_peek_dequeued(), we could get a kernel panic. When the parent of such qdiscs (eg illustrated in patch #3 as tbf) wants to retrieve an skb from its child (sfb in this case), it will do the following: 1a. do a peek() - and when sensing there's an skb the child can offer, then

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:87d3680bebd7b8e0ad1c6bc95e013a2bdb341a8d0d96ef07ba66f2da8b086139

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/sched/sch_sfb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e5ea51e5f3fbba41d50cd84a530f33bc1c8f4d57","status":"affected","version":"e13e02a3c68d899169c78d9a18689bd73491d59a","versionType":"git"},{"lessThan":"1e70274d3b81de28973bcdbce40a512bcb181ff9","status":"affected","version":"e13e02a3c68d899169c78d9a18689bd73491d59a","versionType":"git"},{"lessThan":"e125f5980b730c67c92a30cf150ec8c3d6777318","status":"affected","version":"e13e02a3c68d899169c78d9a18…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2785328b5874f90222092f0ebbdebb51ed511c32553b6998bf10b8f47893a46e · sha256:8c5fa44a903ffa6d… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/sched/sch_sfb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.39"},{"lessThan":"2.6.39","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessT…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2785328b5874f90222092f0ebbdebb51ed511c32553b6998bf10b8f47893a46e · sha256:8c5fa44a903ffa6d… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2785328b5874f90222092f0ebbdebb51ed511c32553b6998bf10b8f47893a46e · sha256:8c5fa44a903ffa6d… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2785328b5874f90222092f0ebbdebb51ed511c32553b6998bf10b8f47893a46e · sha256:8c5fa44a903ffa6d… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/1b9bc71153b01dbde8045b9edede4240f4f5520e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2785328b5874f90222092f0ebbdebb51ed511c32553b6998bf10b8f47893a46e · sha256:8c5fa44a903ffa6d… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/1e70274d3b81de28973bcdbce40a512bcb181ff9"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2785328b5874f90222092f0ebbdebb51ed511c32553b6998bf10b8f47893a46e · sha256:8c5fa44a903ffa6d… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/6c153d97c100f5b282c424101d8ff63122306997"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2785328b5874f90222092f0ebbdebb51ed511c32553b6998bf10b8f47893a46e · sha256:8c5fa44a903ffa6d… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/84bfbfc0c48731bcce74cdf4f9c497547ec525e0"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2785328b5874f90222092f0ebbdebb51ed511c32553b6998bf10b8f47893a46e · sha256:8c5fa44a903ffa6d… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/9ad3288632c859cf84183199832d822e7a70bdae"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2785328b5874f90222092f0ebbdebb51ed511c32553b6998bf10b8f47893a46e · sha256:8c5fa44a903ffa6d… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/dbc560858da8b77dd9e4ef0cd93d421e0e4d7e0e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2785328b5874f90222092f0ebbdebb51ed511c32553b6998bf10b8f47893a46e · sha256:8c5fa44a903ffa6d… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/e125f5980b730c67c92a30cf150ec8c3d6777318"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2785328b5874f90222092f0ebbdebb51ed511c32553b6998bf10b8f47893a46e · sha256:8c5fa44a903ffa6d… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/e5ea51e5f3fbba41d50cd84a530f33bc1c8f4d57"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2785328b5874f90222092f0ebbdebb51ed511c32553b6998bf10b8f47893a46e · sha256:8c5fa44a903ffa6d… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer