01 Record

CVE-2026-23245

net/sched: act_gate: snapshot parameters with RCU on replace

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

net/sched: act_gate: snapshot parameters with RCU on replace

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.13% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 2.8% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-14.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-03-18 10:05Z5 MO AGO

Last updated

2026-08-05 12:20Z1 MO AGO

Reserved

2026-01-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-366Race Condition within a ThreadBase

Data version

5.2

Document digest

0bd412a849984ad845bf51e544fc265bd2f45317bbd1acb92a9da1342fb04acb

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxa51c328df3106663879645680609eb49b3ff6444 to < fc98fd8d214693be91253d9a88cdf8e5e143d124, a51c328df3106663879645680609eb49b3ff6444 to < 8b1251bbf0f10ac745ed74bad4d3b433caa1eeae, a51c328df3106663879645680609eb49b3ff6444 to < dfc314d7c767e350f78a46a8f8b134f80e8ad432, a51c328df3106663879645680609eb49b3ff6444 to < 035d0d09d5ab3ed3e93d18cde2b562a6719eea23, a51c328df3106663879645680609eb49b3ff6444 to < 04d75529dc0f9be78786162ebab7424af4644df2, a51c328df3106663879645680609eb49b3ff6444 to < 58b162e318d0243ad2d7d92456c0873f2494c351, a51c328df3106663879645680609eb49b3ff6444 to < 62413a9c3cb183afb9bb6e94dd68caf4e4145f4c, 5.8—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/fc98fd8d214693be91253d9a88cdf8e5e143d124
git.kernel.orghttps://git.kernel.org/stable/c/8b1251bbf0f10ac745ed74bad4d3b433caa1eeae
git.kernel.orghttps://git.kernel.org/stable/c/dfc314d7c767e350f78a46a8f8b134f80e8ad432
git.kernel.orghttps://git.kernel.org/stable/c/035d0d09d5ab3ed3e93d18cde2b562a6719eea23
git.kernel.orghttps://git.kernel.org/stable/c/04d75529dc0f9be78786162ebab7424af4644df2
git.kernel.orghttps://git.kernel.org/stable/c/58b162e318d0243ad2d7d92456c0873f2494c351
git.kernel.orghttps://git.kernel.org/stable/c/62413a9c3cb183afb9bb6e94dd68caf4e4145f4c
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html

01 Record index

CVE-2026-23245

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-23245

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References