CVE-2026-72035

A flaw was found in the Linux kernel's taprio (Time-Aware Priority Shaper) scheduler. When the taprio software path processes network packets from a non-work-conserving child queue discipline (qdisc), it can incorrectly handle the packet buffer, leading to a null pointer dereference. This issue can cause a kernel panic during ordinary network egress operations, resulting in a Denial of Service (DoS) for the system.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires specific network scheduling configurations that are not present by default and typically necessitate elevated privileges (CAP_NET_ADMIN) or container capabilities. The flaw only manifests when the taprio (Time-Aware Priority Shaper) queuing discipline is explicitly configured in combination with a non-work-conserving child scheduler such as QFQ. While triggering the defect causes a kernel panic and subsequent denial of service during standard packet transmission, confidentiality and integrity remain uncompromised.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.