Null Pointer Dereference in Linux Kernel's QFQ Scheduler

CVE-2026-22976

What is CVE-2026-22976?

A vulnerability in the Linux kernel's QFQ (Quantum Fairness Queueing) scheduling component has been identified, leading to a null pointer dereference during the deactivation of inactive aggregates. This issue arises when two QFQ class objects reference the same leaf queue discipline, causing erroneous behavior when certain operations are invoked, such as qdisc_reset. If active and inactive qdisc states are not properly managed, it can lead to a crash or instability in the system, compromising reliability and security.

References