CVE-2026-23245

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_gate: snapshot parameters with RCU on replace The gate action can be replaced while the hrtimer callback or dump path is walking the schedule list. Convert the parameters to an RCU-protected snapshot and swap updates under tcf_lock, freeing the previous snapshot via call_rcu(). When REPLACE omits the entry list, preserve the existing schedule so the effective state is unchanged.

Affected product and versions

Product

Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

Affected versions

>= a51c328df3106663879645680609eb49b3ff6444 < fc98fd8d214693be91253d9a88cdf8e5e143d124, >= a51c328df3106663879645680609eb49b3ff6444 < 8b1251bbf0f10ac745ed74bad4d3b433caa1eeae, >= a51c328df3106663879645680609eb49b3ff6444 < dfc314d7c767e350f78a46a8f8b134f80e8ad432, >= a51c328df3106663879645680609eb49b3ff6444 < 035d0d09d5ab3ed3e93d18cde2b562a6719eea23, >= a51c328df3106663879645680609eb49b3ff6444 < 04d75529dc0f9be78786162ebab7424af4644df2, >= a51c328df3106663879645680609eb49b3ff6444 < 58b162e318d0243ad2d7d92456c0873f2494c351, >= a51c328df3106663879645680609eb49b3ff6444 < 62413a9c3cb183afb9bb6e94dd68caf4e4145f4c, >= 5.8, >= V3.1.6, >= V3.1.5, >= 5.8.1 < 5.10.253, >= 5.11 < 6.1.167, >= 6.2 < 6.6.130, >= 6.7 < 6.12.78, >= 6.13 < 6.18.18, >= 6.19 < 6.19.8, 5.8, 7.0

Fixed versions

5.10.253, 6.1.167, 6.6.130, 6.12.78, 6.18.18, 6.19.8

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

Not available