CVE-2026-97959

A flaw was found in the Linux kernel. When an existing cls_route traffic control filter is moved to a different bucket during configuration updates, the kernel fails to free the vacated bucket once it becomes empty. This failure leaves stale bucket references in place and prevents the associated protocol resources from being released, causing a memory leak. A local user with network administration capabilities can exploit this vulnerability through repeated filter updates to consume system memory, potentially resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.