01 Record

CVE-2026-74382

net/sched: cls_bpf: prevent unbounded recursion in offload rollback

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

net/sched: cls_bpf: prevent unbounded recursion in offload rollback

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.19% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 9.1% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-08-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-08-15 05:58Z2 MO AGO

Last updated

2026-08-17 05:18Z2 MO AGO

Reserved

2026-08-15

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')Base

Data version

5.2

Document digest

a0e68856edcccd39c0a7e9ab15f53e11c71ecf3c0df19d41224b2daa055fa363

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux102740bd9436a3a6ba129af3a48271d794009fa5 to < a018f208ab7512380bd4cf670064d48cba00a1b1, 102740bd9436a3a6ba129af3a48271d794009fa5 to < 33373e1f378a501bc51aa73312f74295c84e3101, 102740bd9436a3a6ba129af3a48271d794009fa5 to < e2d3b7bab3748c811dc5750ce9a8d62bc7f90ed7, 102740bd9436a3a6ba129af3a48271d794009fa5 to < 4a76953c3ed043797e81529b9395e9ca6f4c7609, 102740bd9436a3a6ba129af3a48271d794009fa5 to < 1387f252a242a51bfbb6eace29c8f8db21b457da, 102740bd9436a3a6ba129af3a48271d794009fa5 to < 10753da2d659dd425a6e620f47f86852d604f67f, 102740bd9436a3a6ba129af3a48271d794009fa5 to < 3fa6fb5d771c992ebedbfa7331c6bcc6f33f89b7, 102740bd9436a3a6ba129af3a48271d794009fa5 to < 27db54b90bcc7c37867fe664107fa25ea6a116e4, 4.15—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a018f208ab7512380bd4cf670064d48cba00a1b1
git.kernel.orghttps://git.kernel.org/stable/c/33373e1f378a501bc51aa73312f74295c84e3101
git.kernel.orghttps://git.kernel.org/stable/c/e2d3b7bab3748c811dc5750ce9a8d62bc7f90ed7
git.kernel.orghttps://git.kernel.org/stable/c/4a76953c3ed043797e81529b9395e9ca6f4c7609
git.kernel.orghttps://git.kernel.org/stable/c/1387f252a242a51bfbb6eace29c8f8db21b457da
git.kernel.orghttps://git.kernel.org/stable/c/10753da2d659dd425a6e620f47f86852d604f67f
git.kernel.orghttps://git.kernel.org/stable/c/3fa6fb5d771c992ebedbfa7331c6bcc6f33f89b7
git.kernel.orghttps://git.kernel.org/stable/c/27db54b90bcc7c37867fe664107fa25ea6a116e4

07 Fixed in

Debian 12

linux
Fixed in 6.1.180-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.100-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.5-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.