Vulnerability in Linux Kernel's sch_sfb Affecting Network Performance

CVE-2026-64012

What is CVE-2026-64012?

A vulnerability in the Linux kernel has been identified within the sch_sfb network scheduling function, which could potentially lead to a kernel panic under specific conditions. When sch_sfb interacts with its child queue disciplines (qdiscs), a null pointer dereference can occur during a dequeue operation. This vulnerability triggers when the parent qdisc calls dequeue on its child, resulting in attempts to retrieve an skb that may not exist. The recommended solution replaces direct dequeue calls with a safer peek method, effectively eliminating the risk of instability and ensuring smoother network operations.

References