01 Record

CVE-2026-74284

net/sched: sch_hfsc: Don't make class passive twice

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

net/sched: sch_hfsc: Don't make class passive twice

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.21% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 11.9% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-08-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2026-08-15 05:57Z2 MO AGO
Last updated: 2026-08-17 05:16Z2 MO AGO
Reserved: 2026-08-15
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 53a3f7db06b8fea832e124c3e054f4605b408b65c92985ad1d2b3e23198a1910

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux72c61ffbeeb8c50f6d4d70c65d3283aa1bac57a7 to < a425c82ff06cda5165e0de3de8c2a445ec1f863e, a5efc95a33bd4fcb879250852828cc58c7862970 to < fc973ecd1a079b9a87c360478542f3a56dea085b, 0475c85426b18eccdcb7f9fb58d8f8e9c6c58c87 to < 15720cd8fa3fc625146128f89a8e11b0449a20a7, 9030a91235ae4845ec71902c3e0cecfc9ed1f2df to < b2a017bfcf565721918ec7355a373911d2f2a227, d06476714d2819b550e0cc39222347e2c8941c9d to < 9221a594c72a1446137926d4c2aa04e345f798dc, 51eb3b65544c9efd6a1026889ee5fb5aa62da3bb to < 66dbb13eeb2fc339f8f548a9076be4c1a94857b0, 51eb3b65544c9efd6a1026889ee5fb5aa62da3bb to < 3a49bbae676fef1ffe548971e6229ae2adeb9d10, 51eb3b65544c9efd6a1026889ee5fb5aa62da3bb to < 90b662ea25f5e83bb3b8ccec5b93ced810b92fb8, 9a5fd5c2f4d4afdd5e405083ee53e0789ce76956, c1175c4ad01dbc9c979d099861fa90a754f72059, 5.10.241 to < 5.10.261, 5.15.190 to < 5.15.212, 6.1.138 to < 6.1.178, 6.6.90 to < 6.6.145, 6.12.28 to < 6.12.97, 5.4.297 to < 5.5, 6.14.6 to < 6.15, 6.15—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a425c82ff06cda5165e0de3de8c2a445ec1f863e
git.kernel.orghttps://git.kernel.org/stable/c/fc973ecd1a079b9a87c360478542f3a56dea085b
git.kernel.orghttps://git.kernel.org/stable/c/15720cd8fa3fc625146128f89a8e11b0449a20a7
git.kernel.orghttps://git.kernel.org/stable/c/b2a017bfcf565721918ec7355a373911d2f2a227
git.kernel.orghttps://git.kernel.org/stable/c/9221a594c72a1446137926d4c2aa04e345f798dc
git.kernel.orghttps://git.kernel.org/stable/c/66dbb13eeb2fc339f8f548a9076be4c1a94857b0
git.kernel.orghttps://git.kernel.org/stable/c/3a49bbae676fef1ffe548971e6229ae2adeb9d10
git.kernel.orghttps://git.kernel.org/stable/c/90b662ea25f5e83bb3b8ccec5b93ced810b92fb8

07 Fixed in

Debian 12

linux
Fixed in 6.1.180-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.100-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.5-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.