CVE-2026-64054

A flaw was found in the net/shaper component of the Linux kernel. This vulnerability occurs because the net_shaper_nl_group_doit() function does not properly handle duplicate leaf entries in a GROUP request. A local attacker could exploit this by supplying the same leaf handle multiple times, leading to a double free of the parent pointer. This memory corruption can result in a denial of service or potentially lead to further compromise of the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.