SB20261022214 - Use of multiple resources with duplicate identifier in Linux kernel sched

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261022214

SB20261022214 - Use of multiple resources with duplicate identifier in Linux kernel sched

Published: October 22, 2026

Security Bulletin ID SB20261022214
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Data manipulation

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Use of multiple resources with duplicate identifier (CVE-ID: CVE-2026-98629)

CWE-ID: CWE-694 - Use of Multiple Resources with Duplicate Identifier

CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a local privileged user to disrupt traffic classification and exhaust hash-table identifiers.

The vulnerability exists due to inconsistent identifier mapping in the Linux kernel u32 traffic classifier when allocating and deleting hash tables with explicit handles. A local privileged user can create and delete specially selected manual hash tables to leave identifier entries permanently allocated, remove entries belonging to unrelated live tables, and cause duplicate handles that direct hash-table lookups and TCA_U32_LINK references to the wrong table.


Remediation

Install update from vendor's website.

References