SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74663

HIGH · CVSS 7.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-08-22 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's queuing discipline (qdisc) management, where overly deep qdisc hierarchies can cause excessive recursion, potentially exhausting the kernel stack. This flaw allows for the creation of new child qdiscs beneath an already deep parent, leading to system instability or crashes. System administrators and developers managing Linux kernel-based systems should prioritize this issue to mitigate risks associated with kernel stack exhaustion.

CVE
CVE-2026-74663
Severity
HIGH
CVSS
7.8
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path, so a hierarchy can still be extended by creating a new child qdisc below an already deep parent. Store the hierarchy depth in struct Qdisc and update it when qdiscs are grafted. Reject new child qdiscs once the parent is already at the maximum allowed depth.