CVE-2026-23245
High
Description
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_gate: snapshot parameters with RCU on replace The gate action can be replaced while the hrtimer callback or dump path is walking the schedule list. Convert the parameters to an RCU-protected snapshot and swap updates under tcf_lock, freeing the previous snapshot via call_rcu(). When REPLACE omits the entry list, preserve the existing schedule so the effective state is unchanged.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux Kernel
PublishedMar 18, 2026
First seenMar 18, 2026
How to fix
Update
- linux linux_kernel5.10.253, 6.1.167, 6.6.130, 6.12.78, 6.18.18, 6.19.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.8.1 ≤ v < 5.10.253, 5.11 ≤ v < 6.1.167, 6.2 ≤ v < 6.6.130, 6.7 ≤ v < 6.12.78, 6.13 ≤ v < 6.18.18, 6.19 ≤ v < 6.19.8, 5.8, 7.0 | 5.10.253, 6.1.167, 6.6.130, 6.12.78, 6.18.18, 6.19.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.