In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_gate: snapshot parameters with RCU on replace
The gate action can be replaced while the hrtimer callback or dump path is walking the schedule list.
Convert the parameters to an RCU-protected snapshot and swap updates under tcflock, freeing the previous snapshot via callrcu(). When REPLACE omits the entry list, preserve the existing schedule so the effective state is unchanged.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23245.json",
"cna_assigner": "Linux"
}