Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-68138
By Eldan Talis |
13 August 2026
Linux kernel net/sched race in qdisc rate tables triggers system-wide use-after-free/double-free
[Under Evaluation – CVE-2026-68138]: Linux kernel net/sched/sch_api.c lacks locking for global qdisc_rtab_list and non-atomic refcnt, so concurrent RTM_NEWTFILTER via cls_flower + police (NO RTNL) can race in qdisc_get_rtab()/qdisc_put_rtab(), causing qdisc_rate_table UAF/double-free. Affected: `Linux >=5.1,