01 Record

CVE-2026-23449

net/sched: teql: Fix double-free in teql_master_xmit

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

net/sched: teql: Fix double-free in teql_master_xmit

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.13% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 3.0% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-14.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-04-03 15:15Z5 MO AGO

Last updated

2026-08-05 12:21Z1 MO AGO

Reserved

2026-01-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-415Double FreeVariant
CWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionBase

Data version

5.2

Document digest

cbef2c6556e378e70f8aa00e263c76d0c1904fd5bb04cdc7b6bd58f4461e9eba

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux96009c7d500efdd5534e83b2e3eb2c58d4b137ae to < 4e8ebc4c18ea8213d28e6cb867d18fcc67daca21, 96009c7d500efdd5534e83b2e3eb2c58d4b137ae to < 21c89a0a8de7eadad8d385645a95b3233f23130e, 96009c7d500efdd5534e83b2e3eb2c58d4b137ae to < afbc79a7770b230a9f24bd39271209d6b3682c5f, 96009c7d500efdd5534e83b2e3eb2c58d4b137ae to < e9c66d3e7d8557b3308e55c613aa07254fe97611, 96009c7d500efdd5534e83b2e3eb2c58d4b137ae to < 4a233447b941db451ea5f5a0942cffd0f7f7eaae, 96009c7d500efdd5534e83b2e3eb2c58d4b137ae to < 66360460cab63c248ca5b1070a01c0c29133b960, 4.18—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/4e8ebc4c18ea8213d28e6cb867d18fcc67daca21
git.kernel.orghttps://git.kernel.org/stable/c/21c89a0a8de7eadad8d385645a95b3233f23130e
git.kernel.orghttps://git.kernel.org/stable/c/afbc79a7770b230a9f24bd39271209d6b3682c5f
git.kernel.orghttps://git.kernel.org/stable/c/e9c66d3e7d8557b3308e55c613aa07254fe97611
git.kernel.orghttps://git.kernel.org/stable/c/4a233447b941db451ea5f5a0942cffd0f7f7eaae
git.kernel.orghttps://git.kernel.org/stable/c/66360460cab63c248ca5b1070a01c0c29133b960
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html

01 Record index

CVE-2026-23449

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-23449

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References