CVE-2026-23379
kernel: net/sched: ets: fix divide by zero in the offload path
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · March 25, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's net/sched: ets module. A local user can exploit an integer overflow vulnerability when the system calculates weighted round-robin (WRR) weights for network traffic. This overflow can lead to a divide-by-zero error, causing the kernel to panic and resulting in a Denial of Service (DoS) for the affected system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-190 · Integer Overflow or Wraparound