Vulnerability in Linux Kernel Affecting Networking Functionality

CVE-2026-23270

What is CVE-2026-23270?

In recent changes to the Linux kernel, a vulnerability was identified that allows the act_ct feature to bind to clsact/ingress queuing disciplines and shared blocks. Although this was not its intended use, users have attempted to attach act_ct to egress paths, creating potential security risks. The issue can lead to a use-after-free (UaF) scenario if packets classified as TC_ACT_CONSUMED are subsequently handled by the defragmentation engine. The resolution restricts the use of act_ct to clsact and ingress qdiscs, thereby mitigating the risk while allowing some flexibility in network configuration.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References