Operation on a Resource after Expiration or Release in Linux kernel - CVE-2026-72036
Published: August 16, 2026
Vulnerability identifier: #VU143559
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-72036
CWE-ID: CWE-672
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper state management in multiq_dequeue in the sch_multiq scheduler when handling queued packets after a peek operation on a non-work-conserving child qdisc. A local user can trigger network traffic through the affected queuing path to cause a denial of service.
The issue can desynchronize the child queue length and backlog accounting and lead to a NULL pointer dereference in softirq context on egress.
Affected software
Linux kernel
How to mitigate CVE-2026-72036
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/1b9cc255e8089606b92b2adf504e334573682821
- https://git.kernel.org/stable/c/3e5fd9d14f2d228e7260251f2e4a1d41ba8f705a
- https://git.kernel.org/stable/c/54f6b0c843e228d499eb4b6bbb89df68cad9ad5d
- https://git.kernel.org/stable/c/5889064919a1e5c0a9469c54895000414fc46944
- https://git.kernel.org/stable/c/7a5a1582710981ef6637de9f074a60a5b1d63222
- https://git.kernel.org/stable/c/86a61e46a1919e8abf4d227c204773dabb24068a
- https://git.kernel.org/stable/c/eb1a9637f0bd84b5db8803af65dfb1f44785406f
- https://git.kernel.org/stable/c/fffeb2ab5eeb823d4c2330571a098f63237c9049