Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net_sched: fix skb memory leak in deferred qdisc drops When the network stack cleans up the deferred list via qdisc_run_end(), it operates on the root qdisc. If the root qdisc do not implement the TCQ_F_DEQUEUE_DROPS flag the packets queue to free are never freed and gets stranded on the child's local to_free list. Fix this by making qdisc_dequeue_drop() aware of the root qdisc. It fetches the root qdisc and check for the TCQ_F_DEQUEUE_DROPS flag. If the flag is present, the packet is appended directly to the root's to_free list. Otherwise, drop it directly as it was done before the optimization was implemented.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 6.19, < 7.0.10 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/a6bd339dbb3514bce690fdcf252e788dfab4ee76Patch
- https://git.kernel.org/stable/c/bf26ad92ffda7884825d67b46bd5efe615c3babfPatch
FAQ
What is CVE-2026-53079?
CVE-2026-53079 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: net_sched: fix skb memory leak in deferred qdisc drops When the network stack cleans up the deferred list via qdisc_run_end(), it ...
How severe is CVE-2026-53079?
CVE-2026-53079 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-53079?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.