CVE-2026-52997
kernel: net/sched: sch_dualpi2: drain both C-queue and L-queue in dualpi2_change()
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 24, 2026
Updated · June 27, 2026
Description
A flaw was found in the Linux kernel's sch_dualpi2 qdisc (queueing discipline) component. When dualpi2_change() attempts to enforce updated limit and memory limit values, it may incorrectly try to dequeue packets from an empty C-queue while packets are present in the L-queue. This can lead to a NULL skb (socket buffer) dereference, potentially causing a system crash or a Denial of Service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-476 · NULL Pointer Dereference