In the Linux kernel, the following vulnerability has been resolved:
net/sched: qfq: Use clisactive to determine whether class is active in qfqrmfrom_ag
This is more of a preventive patch to make the code more consistent and to prevent possible exploits that employ child qlen manipulations on qfq. use clisactive instead of relying on the child qdisc's qlen to determine class activation.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23105.json",
"cna_assigner": "Linux"
}