CVE-2026-74663

High

Description

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path, so a hierarchy can still be extended by creating a new child qdisc below an already deep parent. Store the hierarchy depth in struct Qdisc and update it when qdiscs are grafted. Reject new child qdiscs once the parent is already at the maximum allowed depth.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux
PublishedAug 22, 2026
First seenAug 22, 2026

How to fix

Update
  • Linux Linux08dc49df1527b09d9ea225a7265bbf6c237097bf, a627d36c2a94e18c8c105ae68008786dfd85592e, 9f69bb9fdaa2fe64b68bb62fb84d405784bee540, 8ca8cdb74939581339e1ae370193c0adb5a85336, 2759acf08a3454866660edcd3ef4e64139f254a6, a4b14a4df29d36458a943f9b521ddd0f940363cc, e2d658c6427844cee5bc654b436ca68d680b6148, dedd34b0f2310e28c5f6d4875cfbf4b7ed821c01 or later

Affected products

ProductAffected versionsFixed in
Linux Linux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 08dc49df1527b09d9ea225a7265bbf6c237097bf, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < a627d36c2a94e18c8c105ae68008786dfd85592e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 9f69bb9fdaa2fe64b68bb62fb84d405784bee540, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 8ca8cdb74939581339e1ae370193c0adb5a85336, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 2759acf08a3454866660edcd3ef4e64139f254a6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < a4b14a4df29d36458a943f9b521ddd0f940363cc, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < e2d658c6427844cee5bc654b436ca68d680b6148, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < dedd34b0f2310e28c5f6d4875cfbf4b7ed821c01, 2.6.1208dc49df1527b09d9ea225a7265bbf6c237097bf, a627d36c2a94e18c8c105ae68008786dfd85592e, 9f69bb9fdaa2fe64b68bb62fb84d405784bee540, 8ca8cdb74939581339e1ae370193c0adb5a85336, 2759acf08a3454866660edcd3ef4e64139f254a6, a4b14a4df29d36458a943f9b521ddd0f940363cc, e2d658c6427844cee5bc654b436ca68d680b6148, dedd34b0f2310e28c5f6d4875cfbf4b7ed821c01

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.