CVE-2026-64207

A flaw was found in the Linux kernel's DualPI2 (Dual-rate PI2) queue discipline. This vulnerability arises from incorrect accounting of Generic Segmentation Offload (GSO) backlog, where the parent queue (such as QFQ - Hierarchical Fair Queueing) miscalculates the number of queued packets. This miscalculation can lead to a NULL pointer dereference when the system attempts to dequeue packets from an inactive class, resulting in a system crash and a Denial of Service (DoS) condition.