CVE-2026-45845

A flaw was found in the Linux kernel's TAPRIO (Traffic Policing and Rate Limiting I/O) qdisc. An unprivileged local user, with namespace-scoped CAP_NET_ADMIN capabilities, can trigger a kernel null pointer dereference. This occurs by creating a TAPRIO qdisc in a new network namespace, grafting and then deleting a child qdisc, and subsequently requesting a class dump. Successful exploitation leads to a kernel panic, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.