SB20261023138 - Use-after-free in Linux kernel net team driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261023138

SB20261023138 - Use-after-free in Linux kernel net team driver

Published: October 23, 2026

Security Bulletin ID SB20261023138
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Use-after-free (CVE-ID: CVE-2026-99027)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service by triggering a kernel crash.

The vulnerability exists due to use-after-free in the Linux kernel team driver's queue override transmission helper when an override port's queueing discipline drops a packet buffer and transmission returns a nonzero result. A local user can trigger packet transmission through the affected queue override path to cause the freed buffer to be reused for another port or the mode transmit operation, potentially crashing the kernel.


Remediation

Install update from vendor's website.

References