SB2026081278 - NULL pointer dereference in Linux kernel sched

Description

This security bulletin contains information about 1 vulnerability.

1) NULL pointer dereference (CVE-ID: CVE-2026-68441)

CWE-ID: CWE-476 - NULL Pointer Dereference

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a null pointer dereference in qdisc filter chain classification handling when processing TC_ACT_REDIRECT from a TC filter attached to a qdisc filter chain. A local user can trigger TC_ACT_REDIRECT, for example via an eBPF program calling bpf_redirect(), to cause a denial of service.

The issue occurs when the caller does not set up bpf_net_context, and the clsact fast path is unaffected.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/c8fd74445e86f88096d2f6cf0f9e4d54d8ed1781
• https://git.kernel.org/stable/c/ec48b3be2c8595dd290be883dbd4fb8b2f9f5d5e