CVE-2026-31421
Description
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL pointer dereference on shared blocks The old-method path in fw_classify() calls tcf_block_q() and dereferences q->handle. Shared blocks leave block->q NULL, causing a NULL deref when an empty cls_fw filter is attached to a shared block and a packet with a nonzero major skb mark is classified. Reject the configuration in fw_change() when the old method (no TCA_OPTIONS) is used on a shared block, since fw_classify()'s old-method path needs block->q which is NULL for shared blocks. The fixed null-ptr-deref calling stack: KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] RIP: 0010:fw_classify (net/sched/cls_fw.c:81) Call Trace: tcf_classify (./include/net/tc_wrapper.h:197 net/sched/cls_api.c:1764 net/sched/cls_api.c:1860) tc_run (net/core/dev.c:4401) __dev_queue_xmit (net/core/dev.c:4535 net/core/dev.c:4790)
How to fix
- linux linux_kernel5.10.253, 5.15.203, 6.1.168, 6.6.134, 6.12.81, 6.18.22, 6.19.12 or later
- git.kernel.org/stable/c/18328eff2f97d1a6adcdb6d4a0f42f2f83a31e28
- git.kernel.org/stable/c/3cb055df9e8625ce699a259d8178d67b37f2b160
- git.kernel.org/stable/c/3d41f9a314afa94b1c7c7c75405920123220e8cd
- git.kernel.org/stable/c/5cf41031922c154aa5ccda8bcdb0f5e6226582ec
- git.kernel.org/stable/c/96426c348def662b06bfdc65be3002905604927a
- git.kernel.org/stable/c/d6d5bd62a09650856e1e2010eb09853eba0d64e1
- git.kernel.org/stable/c/faeea8bbf6e958bf3c00cb08263109661975987c
- git.kernel.org/stable/c/febf64ca79a2d6540ab6e5e197fa0f4f7e84473e
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 4.15 ≤ v < 5.10.253, 5.11 ≤ v < 5.15.203, 5.16 ≤ v < 6.1.168, 6.2 ≤ v < 6.6.134, 6.7 ≤ v < 6.12.81, 6.13 ≤ v < 6.18.22, 6.19 ≤ v < 6.19.12, 7.0 | 5.10.253, 5.15.203, 6.1.168, 6.6.134, 6.12.81, 6.18.22, 6.19.12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.