CVE-2026-23449

A flaw was found in the Linux kernel's Traffic Equalizer (TEQL) network scheduler. When a TEQL device uses a lockless Queueing Discipline (Qdisc) as its root, a race condition can occur during the qdisc_reset operation if it is not properly synchronized with the datapath. This can lead to a double-free vulnerability, which may cause the system to crash, resulting in a Denial of Service (DoS).

This vulnerability affects systems using the TEQL (Traffic Equalizer) network scheduler with lockless qdiscs. TEQL is a specialized scheduler for load balancing across multiple network interfaces, not commonly used in typical deployments. The race condition requires specific timing and configuration to trigger.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the sch_teql module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.