{"id":"CVE-2026-23245","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_gate: snapshot parameters with RCU on replace\n\nThe gate action can be replaced while the hrtimer callback or dump path is\nwalking the schedule list.\n\nCon…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_gate: snapshot parameters with RCU on replace\n\nThe gate action can be replaced while the hrtimer callback or dump path is\nwalking the schedule list.\n\nCon…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 5.8.1, < 5.10.253","linux_kernel >= 5.11, < 6.1.167","linux_kernel >= 6.2, < 6.6.130","linux_kernel >= 6.7, < 6.12.78","linux_kernel >= 6.13, < 6.18.18","linux_kernel >= 6.19, < 6.19.8","linux_kernel = 5.8","linux_kernel = 7.0"],"patched":["linux_kernel 6.19.8"],"published":"2026-03-18","updated":"2026-10-15","sourceUpdated":"2026-10-15T02:18:44.580","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-23245","references":[{"url":"https://git.kernel.org/stable/c/035d0d09d5ab3ed3e93d18cde2b562a6719eea23","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/04d75529dc0f9be78786162ebab7424af4644df2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/58b162e318d0243ad2d7d92456c0873f2494c351","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/62413a9c3cb183afb9bb6e94dd68caf4e4145f4c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/8b1251bbf0f10ac745ed74bad4d3b433caa1eeae","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/dfc314d7c767e350f78a46a8f8b134f80e8ad432","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/fc98fd8d214693be91253d9a88cdf8e5e143d124","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-784472.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","cve.org"],"epss":0.00136,"epssPercentile":0.0298,"ingestedAt":"2026-09-08T15:33:26.993Z","slug":"CVE-2026-23245","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_gate: snapshot parameters with RCU on replace\n\nThe gate action can be replaced while the hrtimer callback or dump path is\nwalking the schedule list.\n\nConvert the parameters to an RCU-protected snapshot and swap updates under\ntcf_lock, freeing the previous snapshot via call_rcu(). When REPLACE omits\nthe entry list, preserve the existing schedule so the effective state is\nunchanged.\n\n## Affected\n\n- `linux_kernel >= 5.8.1, < 5.10.253`\n- `linux_kernel >= 5.11, < 6.1.167`\n- `linux_kernel >= 6.2, < 6.6.130`\n- `linux_kernel >= 6.7, < 6.12.78`\n- `linux_kernel >= 6.13, < 6.18.18`\n- `linux_kernel >= 6.19, < 6.19.8`\n- `linux_kernel = 5.8`\n- `linux_kernel = 7.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.19.8`","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}