Race condition in Linux kernel - CVE-2026-90248
Published: September 18, 2026
Vulnerability identifier: #VU151242
CSH Severity: Low
CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-90248
CWE-ID: CWE-362
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to silently unlink an active traffic classifier.
The vulnerability exists due to improper ownership tracking in tc_new_tfilter() when handling concurrent traffic-control filter insertions. A local user can race another request to insert a traffic-control filter at the same chain and priority to silently unlink an active traffic classifier.
Affected software
Linux kernel
How to mitigate CVE-2026-90248
Install security update from vendor's repository.
External References
- https://git.kernel.org/stable/c/219c87aeefdcc8c1caf28cc99e9b361ce7393d3a
- https://git.kernel.org/stable/c/a68e664ddf16ecae6d769d6a2eb356f8abab75c9
- https://git.kernel.org/stable/c/bbe2fd6d77df630356185406a97317f6aa6a92cf
- https://git.kernel.org/stable/c/bee2208276c8e0e40a249ffdcf6e5434a79a847c
- https://git.kernel.org/stable/c/d4e359b3608a0e184bbe8d61a5c3b50d0831c44a
- https://git.kernel.org/stable/c/dc8b33b819cb02a75936940c120aa669ad89942d
- https://git.kernel.org/stable/c/df02b6dc136af45e92ee4c86f4aa6c9a60790b1e