[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-23270":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":58,"related":59,"reserved_at":9,"published_at":66,"modified_at":67,"state":68,"summary":69,"references_raw":78,"kevs":109,"epss":110,"epss_history":113,"metrics":341,"affected":349},"CVE-2026-23270","In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks\n\nAs Paolo said earlier [1]:\n\n\"Since the blamed commit below, classify can return TC_ACT_CONSUMED while\nthe current skb being held by the defragmentation engine. As reported by\nGangMin Kim, if such packet is that may cause a UaF when the defrag engine\nlater on tries to tuch again such packet.\"\n\nact_ct was never meant to be used in the egress path, however some users\nare attaching it to egress today [2]. Attempting to reach a middle\nground, we noticed that, while most qdiscs are not handling\nTC_ACT_CONSUMED, clsact/ingress qdiscs are. With that in mind, we\naddress the issue by only allowing act_ct to bind to clsact/ingress\nqdiscs and shared blocks. That way it's still possible to attach act_ct to\negress (albeit only with clsact).\n\n[1] https://lore.kernel.org/netdev/674b8cbfc385c6f37fb29a1de08d8fe5c2b0fbee.1771321118.git.pabeni@redhat.com/\n[2] https://lore.kernel.org/netdev/cc6bfb4a-4a2b-42d8-b9ce-7ef6644fb22b@ovn.org/",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56],{"_key":25},"SUSE-SU-2026:21123-1",{"_key":27},"SUSE-SU-2026:21114-1",{"_key":29},"OPENSUSE-SU-2026:20572-1",{"_key":31},"SUSE-SU-2026:21237-1",{"_key":33},"SUSE-SU-2026:1573-1",{"_key":35},"SUSE-SU-2026:21255-1",{"_key":37},"DEBIAN-CVE-2026-23270",{"_key":39},"UBUNTU-CVE-2026-23270",{"_key":41},"RHSA-2026:13565",{"_key":43},"RHSA-2026:13566",{"_key":45},"RHSA-2026:19568",{"_key":47},"RHSA-2026:19569",{"_key":49},"RHSA-2026:21209",{"_key":51},"RHSA-2026:21706",{"_key":53},"RHSA-2026:21745",{"_key":55},"RHSA-2026:22900",{"_key":57},"RHSA-2026:22940",[],[60,61,62,63,64,65],{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},"2026-03-18T17:54:43.803Z","2026-05-23T16:04:25.027Z","Analyzed",{"cisa_kev":70,"cisa_ransomware":70,"cisa_vendor":9,"epss_severity":71,"epss_score":72,"severity":73,"severity_score":74,"severity_version":75,"severity_source":76,"severity_vector":77,"severity_status":68},false,"low",0.00018,"high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[79,85,89,93,97,101,105],{"url":80,"sources":81,"tags":83},"https://git.kernel.org/stable/c/524ce8b4ea8f64900b6c52b6a28df74f6bc0801e",[76,82],"nvd",[84],"Patch",{"url":86,"sources":87,"tags":88},"https://git.kernel.org/stable/c/380ad8b7c65ea7aa10ef2258297079ed5ac1f5b6",[76,82],[84],{"url":90,"sources":91,"tags":92},"https://git.kernel.org/stable/c/9deda0fcda5c1f388c5e279541850b71a2ccfcf4",[76,82],[84],{"url":94,"sources":95,"tags":96},"https://git.kernel.org/stable/c/11cb63b0d1a0685e0831ae3c77223e002ef18189",[76,82],[84],{"url":98,"sources":99,"tags":100},"https://git.kernel.org/stable/c/fb3c380a54e33d1fd272cc342faa906d787d7ef1",[76,82],[84],{"url":102,"sources":103,"tags":104},"https://git.kernel.org/stable/c/5a110ddcc99bda77a28598b3555fe009eaab3828",[76,82],[84],{"url":106,"sources":107,"tags":108},"https://git.kernel.org/stable/c/bc4e5bb529823a09f02dbe96169de679a9db26e0",[76,82],[84],[],{"date":111,"score":72,"percentile":112},"2026-06-04",0.0486,[114,117,120,123,126,129,133,137,140,143,146,149,152,155,158,161,165,167,170,172,174,177,180,182,185,188,191,194,197,199,201,204,208,211,214,217,220,223,226,229,232,235,238,241,244,247,250,252,254,257,260,262,265,268,271,274,277,280,283,286,289,292,295,298,301,304,307,310,313,316,319,322,325,328,331,334,337,340],{"date":115,"score":72,"percentile":116},"2026-03-19",0.04143,{"date":118,"score":72,"percentile":119},"2026-03-20",0.04152,{"date":121,"score":72,"percentile":122},"2026-03-21",0.0434,{"date":124,"score":72,"percentile":125},"2026-03-22",0.04331,{"date":127,"score":72,"percentile":128},"2026-03-23",0.04332,{"date":130,"score":131,"percentile":132},"2026-03-24",0.00023,0.0609,{"date":134,"score":135,"percentile":136},"2026-03-25",0.00032,0.09161,{"date":138,"score":135,"percentile":139},"2026-03-26",0.09239,{"date":141,"score":135,"percentile":142},"2026-03-27",0.09249,{"date":144,"score":135,"percentile":145},"2026-03-28",0.09267,{"date":147,"score":135,"percentile":148},"2026-03-29",0.09235,{"date":150,"score":135,"percentile":151},"2026-03-30",0.09209,{"date":153,"score":135,"percentile":154},"2026-03-31",0.09181,{"date":156,"score":135,"percentile":157},"2026-04-01",0.09174,{"date":159,"score":135,"percentile":160},"2026-04-02",0.09178,{"date":162,"score":163,"percentile":164},"2026-04-03",0.00013,0.02324,{"date":166,"score":163,"percentile":164},"2026-04-04",{"date":168,"score":163,"percentile":169},"2026-04-05",0.0232,{"date":171,"score":163,"percentile":169},"2026-04-06",{"date":173,"score":163,"percentile":169},"2026-04-07",{"date":175,"score":163,"percentile":176},"2026-04-08",0.02323,{"date":178,"score":163,"percentile":179},"2026-04-09",0.02344,{"date":181,"score":163,"percentile":179},"2026-04-10",{"date":183,"score":163,"percentile":184},"2026-04-11",0.02327,{"date":186,"score":163,"percentile":187},"2026-04-12",0.02313,{"date":189,"score":163,"percentile":190},"2026-04-13",0.02311,{"date":192,"score":163,"percentile":193},"2026-04-14",0.02295,{"date":195,"score":163,"percentile":196},"2026-04-15",0.02286,{"date":198,"score":163,"percentile":193},"2026-04-16",{"date":200,"score":163,"percentile":193},"2026-04-17",{"date":202,"score":163,"percentile":203},"2026-04-18",0.02301,{"date":205,"score":206,"percentile":207},"2026-04-19",0.00015,0.03289,{"date":209,"score":206,"percentile":210},"2026-04-20",0.0328,{"date":212,"score":206,"percentile":213},"2026-04-21",0.03414,{"date":215,"score":206,"percentile":216},"2026-04-22",0.03425,{"date":218,"score":206,"percentile":219},"2026-04-23",0.03423,{"date":221,"score":206,"percentile":222},"2026-04-24",0.034,{"date":224,"score":206,"percentile":225},"2026-04-25",0.03412,{"date":227,"score":206,"percentile":228},"2026-04-26",0.03406,{"date":230,"score":206,"percentile":231},"2026-04-27",0.0339,{"date":233,"score":206,"percentile":234},"2026-04-28",0.03431,{"date":236,"score":206,"percentile":237},"2026-04-29",0.0345,{"date":239,"score":206,"percentile":240},"2026-04-30",0.03442,{"date":242,"score":206,"percentile":243},"2026-05-01",0.03441,{"date":245,"score":206,"percentile":246},"2026-05-02",0.03428,{"date":248,"score":206,"percentile":249},"2026-05-03",0.03417,{"date":251,"score":206,"percentile":213},"2026-05-04",{"date":253,"score":206,"percentile":225},"2026-05-05",{"date":255,"score":206,"percentile":256},"2026-05-06",0.03408,{"date":258,"score":206,"percentile":259},"2026-05-07",0.03429,{"date":261,"score":206,"percentile":243},"2026-05-08",{"date":263,"score":206,"percentile":264},"2026-05-09",0.03466,{"date":266,"score":206,"percentile":267},"2026-05-10",0.0348,{"date":269,"score":206,"percentile":270},"2026-05-11",0.0347,{"date":272,"score":206,"percentile":273},"2026-05-12",0.03477,{"date":275,"score":206,"percentile":276},"2026-05-13",0.035,{"date":278,"score":206,"percentile":279},"2026-05-14",0.03512,{"date":281,"score":206,"percentile":282},"2026-05-15",0.0353,{"date":284,"score":206,"percentile":285},"2026-05-16",0.03539,{"date":287,"score":206,"percentile":288},"2026-05-17",0.03538,{"date":290,"score":206,"percentile":291},"2026-05-18",0.0351,{"date":293,"score":206,"percentile":294},"2026-05-19",0.03504,{"date":296,"score":206,"percentile":297},"2026-05-20",0.03507,{"date":299,"score":206,"percentile":300},"2026-05-21",0.03505,{"date":302,"score":206,"percentile":303},"2026-05-22",0.03681,{"date":305,"score":206,"percentile":306},"2026-05-23",0.03668,{"date":308,"score":206,"percentile":309},"2026-05-24",0.03659,{"date":311,"score":72,"percentile":312},"2026-05-25",0.04952,{"date":314,"score":72,"percentile":315},"2026-05-26",0.04949,{"date":317,"score":72,"percentile":318},"2026-05-27",0.04977,{"date":320,"score":72,"percentile":321},"2026-05-28",0.04994,{"date":323,"score":72,"percentile":324},"2026-05-29",0.05006,{"date":326,"score":72,"percentile":327},"2026-05-30",0.05019,{"date":329,"score":72,"percentile":330},"2026-05-31",0.05,{"date":332,"score":72,"percentile":333},"2026-06-01",0.04939,{"date":335,"score":72,"percentile":336},"2026-06-02",0.04898,{"date":338,"score":72,"percentile":339},"2026-06-03",0.04869,{"date":111,"score":72,"percentile":112},[342,347],{"source":76,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":343,"cvss_v4_0":9},{"baseScore":74,"baseSeverity":344,"vectorString":77,"impactScore":345,"exploitabilityScore":346},"HIGH",9.8,4.6,{"source":82,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":348,"cvss_v4_0":9},{"baseScore":74,"baseSeverity":344,"vectorString":77,"impactScore":345,"exploitabilityScore":346},[350,405],{"ecosystem":9,"name":351,"vendor":352,"product":352,"cpe_part":353,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":354},"Linux","linux","a",[355,358,360,362,367,370,373,377,380,383,386,388,392,396,400,404],{"version":356,"is_range":70,"range_type":76,"version_start":356,"version_start_type":357,"version_end":356,"version_end_type":357,"fixed_in":9},"0b5b831122fc3789fff75be433ba3e4dd7b779d4","including",{"version":359,"is_range":70,"range_type":76,"version_start":359,"version_start_type":357,"version_end":359,"version_end_type":357,"fixed_in":9},"73f7da5fd124f2cda9161e2e46114915e6e82e97",{"version":361,"is_range":70,"range_type":76,"version_start":361,"version_start_type":357,"version_end":361,"version_end_type":357,"fixed_in":9},"172ba7d46c202e679f3ccb10264c67416aaeb1c4",{"version":363,"is_range":364,"range_type":76,"version_start":361,"version_start_type":357,"version_end":365,"version_end_type":366,"fixed_in":9},">= 172ba7d46c202e679f3ccb10264c67416aaeb1c4, \u003C bc4e5bb529823a09f02dbe96169de679a9db26e0",true,"bc4e5bb529823a09f02dbe96169de679a9db26e0","excluding",{"version":368,"is_range":364,"range_type":76,"version_start":356,"version_start_type":357,"version_end":369,"version_end_type":366,"fixed_in":9},">= 0b5b831122fc3789fff75be433ba3e4dd7b779d4, \u003C fb3c380a54e33d1fd272cc342faa906d787d7ef1","fb3c380a54e33d1fd272cc342faa906d787d7ef1",{"version":371,"is_range":364,"range_type":76,"version_start":359,"version_start_type":357,"version_end":372,"version_end_type":366,"fixed_in":9},">= 73f7da5fd124f2cda9161e2e46114915e6e82e97, \u003C 5a110ddcc99bda77a28598b3555fe009eaab3828","5a110ddcc99bda77a28598b3555fe009eaab3828",{"version":374,"is_range":364,"range_type":76,"version_start":375,"version_start_type":357,"version_end":376,"version_end_type":366,"fixed_in":9},">= 3f14b377d01d8357eba032b4cabc8c1149b458b6, \u003C 524ce8b4ea8f64900b6c52b6a28df74f6bc0801e","3f14b377d01d8357eba032b4cabc8c1149b458b6","524ce8b4ea8f64900b6c52b6a28df74f6bc0801e",{"version":378,"is_range":364,"range_type":76,"version_start":375,"version_start_type":357,"version_end":379,"version_end_type":366,"fixed_in":9},">= 3f14b377d01d8357eba032b4cabc8c1149b458b6, \u003C 380ad8b7c65ea7aa10ef2258297079ed5ac1f5b6","380ad8b7c65ea7aa10ef2258297079ed5ac1f5b6",{"version":381,"is_range":364,"range_type":76,"version_start":375,"version_start_type":357,"version_end":382,"version_end_type":366,"fixed_in":9},">= 3f14b377d01d8357eba032b4cabc8c1149b458b6, \u003C 9deda0fcda5c1f388c5e279541850b71a2ccfcf4","9deda0fcda5c1f388c5e279541850b71a2ccfcf4",{"version":384,"is_range":364,"range_type":76,"version_start":375,"version_start_type":357,"version_end":385,"version_end_type":366,"fixed_in":9},">= 3f14b377d01d8357eba032b4cabc8c1149b458b6, \u003C 11cb63b0d1a0685e0831ae3c77223e002ef18189","11cb63b0d1a0685e0831ae3c77223e002ef18189",{"version":387,"is_range":70,"range_type":76,"version_start":387,"version_start_type":357,"version_end":387,"version_end_type":357,"fixed_in":9},"f5346df0591d10bc948761ca854b1fae6d2ef441",{"version":389,"is_range":364,"range_type":76,"version_start":390,"version_start_type":357,"version_end":391,"version_end_type":366,"fixed_in":9},">= 5.15.148, \u003C 5.15.203","5.15.148","5.15.203",{"version":393,"is_range":364,"range_type":76,"version_start":394,"version_start_type":357,"version_end":395,"version_end_type":366,"fixed_in":9},">= 6.1.75, \u003C 6.1.167","6.1.75","6.1.167",{"version":397,"is_range":364,"range_type":76,"version_start":398,"version_start_type":357,"version_end":399,"version_end_type":366,"fixed_in":9},">= 6.6.14, \u003C 6.6.130","6.6.14","6.6.130",{"version":401,"is_range":364,"range_type":76,"version_start":402,"version_start_type":357,"version_end":403,"version_end_type":366,"fixed_in":9},">= 6.7.2, \u003C 6.8","6.7.2","6.8",{"version":403,"is_range":70,"range_type":76,"version_start":403,"version_start_type":357,"version_end":403,"version_end_type":357,"fixed_in":9},{"ecosystem":9,"name":406,"vendor":352,"product":407,"cpe_part":408,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":409},"linux kernel","linux_kernel","o",[410,413,415,417,419,422,426,430,432],{"version":411,"is_range":364,"range_type":412,"version_start":390,"version_start_type":357,"version_end":391,"version_end_type":366,"fixed_in":9},"gte5.15.148_lt5.15.203","cpe",{"version":414,"is_range":364,"range_type":412,"version_start":394,"version_start_type":357,"version_end":395,"version_end_type":366,"fixed_in":9},"gte6.1.75_lt6.1.167",{"version":416,"is_range":364,"range_type":412,"version_start":398,"version_start_type":357,"version_end":399,"version_end_type":366,"fixed_in":9},"gte6.6.14_lt6.6.130",{"version":418,"is_range":364,"range_type":412,"version_start":402,"version_start_type":357,"version_end":403,"version_end_type":366,"fixed_in":9},"gte6.7.2_lt6.8",{"version":420,"is_range":364,"range_type":412,"version_start":403,"version_start_type":357,"version_end":421,"version_end_type":366,"fixed_in":9},"gte6.8_lt6.12.77","6.12.77",{"version":423,"is_range":364,"range_type":412,"version_start":424,"version_start_type":357,"version_end":425,"version_end_type":366,"fixed_in":9},"gte6.13_lt6.18.18","6.13","6.18.18",{"version":427,"is_range":364,"range_type":412,"version_start":428,"version_start_type":357,"version_end":429,"version_end_type":366,"fixed_in":9},"gte6.19_lt6.19.8","6.19","6.19.8",{"version":431,"is_range":70,"range_type":412,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc1",{"version":433,"is_range":70,"range_type":412,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc2"]