Incomplete cleanup in Linux kernel - CVE-2026-97966

Vulnerability details

The vulnerability allows a local user to affect scheduler topology settings for later queue allocations.

The vulnerability exists due to incomplete cleanup of scheduler topology state in the OcteonTX2 PF QoS scheduler queue teardown logic when freeing QoS-allocated scheduler queues. A local user can trigger QoS scheduler hierarchy teardown to affect scheduler topology settings for later queue allocations.

PRIO_ANCHOR and RR_PRIO settings can persist in the shared scheduler pool.

Affected software

How to mitigate CVE-2026-97966

External References

• https://git.kernel.org/stable/c/0aa2dd6eaa347c7aab448df0eec0afcfe7489885
• https://git.kernel.org/stable/c/2df186418e17b30b319cf9ff81aad137692ab107
• https://git.kernel.org/stable/c/621c99be42e3f5cb68a6af9480a255218a761c4e
• https://git.kernel.org/stable/c/ef39fca8508597fa565cf2be72a884a712fb98af

Related Security Bulletins

• Incomplete cleanup in Linux kernel octeontx2 nic driver