GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-74284 (GCVE-0-2026-74284)

Vulnerability from cvelistv5 – Published: 2026-08-15 05:57 – Updated: 2026-08-17 05:16
VLAI
Title
net/sched: sch_hfsc: Don't make class passive twice
Summary
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: Don't make class passive twice update_vf() is called from two places for the same class during a single dequeue when the class's child qdisc (e.g. codel/fq_codel) drops its last packets while dequeuing: 1. The child calls qdisc_tree_reduce_backlog(), which, now that the child is empty, invokes hfsc_qlen_notify() -> update_vf(cl, 0, 0) and turns the class passive (cl_nactive is decremented up the hierarchy). 2. hfsc_dequeue() then calls update_vf(cl, qdisc_pkt_len(skb), cur_time) to charge the dequeued bytes. On the second call the class is already passive, but its child qdisc is still empty, so update_vf() arms go_passive again: if (cl->qdisc->q.qlen == 0 && cl->cl_flags & HFSC_FSC) go_passive = 1; The leaf is then skipped by the cl_nactive == 0 check inside the loop, which does not clear go_passive, so the stale go_passive propagates to the parent and decrements its cl_nactive a second time. A parent that still has other active children is driven to cl_nactive == 0 and removed from the vttree, even though those siblings are still backlogged. They are never dequeued again and the qdisc stalls. Fix this by only arming go_passive when the class is actually active, so an already-passive class no longer triggers a second passive transition. The byte accounting (cl->cl_total += len) still runs for every ancestor, so dequeued bytes continue to be counted exactly once.
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 72c61ffbeeb8c50f6d4d70c65d3283aa1bac57a7 , < a425c82ff06cda5165e0de3de8c2a445ec1f863e (git)
Affected: a5efc95a33bd4fcb879250852828cc58c7862970 , < fc973ecd1a079b9a87c360478542f3a56dea085b (git)
Affected: 0475c85426b18eccdcb7f9fb58d8f8e9c6c58c87 , < 15720cd8fa3fc625146128f89a8e11b0449a20a7 (git)
Affected: 9030a91235ae4845ec71902c3e0cecfc9ed1f2df , < b2a017bfcf565721918ec7355a373911d2f2a227 (git)
Affected: d06476714d2819b550e0cc39222347e2c8941c9d , < 9221a594c72a1446137926d4c2aa04e345f798dc (git)
Affected: 51eb3b65544c9efd6a1026889ee5fb5aa62da3bb , < 66dbb13eeb2fc339f8f548a9076be4c1a94857b0 (git)
Affected: 51eb3b65544c9efd6a1026889ee5fb5aa62da3bb , < 3a49bbae676fef1ffe548971e6229ae2adeb9d10 (git)
Affected: 51eb3b65544c9efd6a1026889ee5fb5aa62da3bb , < 90b662ea25f5e83bb3b8ccec5b93ced810b92fb8 (git)
Affected: 9a5fd5c2f4d4afdd5e405083ee53e0789ce76956 (git)
Affected: c1175c4ad01dbc9c979d099861fa90a754f72059 (git)
Affected: 5.10.241 , < 5.10.261 (semver)
Affected: 5.15.190 , < 5.15.212 (semver)
Affected: 6.1.138 , < 6.1.178 (semver)
Affected: 6.6.90 , < 6.6.145 (semver)
Affected: 6.12.28 , < 6.12.97 (semver)
Affected: 5.4.297 , < 5.5 (semver)
Affected: 6.14.6 , < 6.15 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.15
Unaffected: 0 , < 6.15 (semver)
Unaffected: 5.10.261 , ≤ 5.10.* (semver)
Unaffected: 5.15.212 , ≤ 5.15.* (semver)
Unaffected: 6.1.178 , ≤ 6.1.* (semver)
Unaffected: 6.6.145 , ≤ 6.6.* (semver)
Unaffected: 6.12.97 , ≤ 6.12.* (semver)
Unaffected: 6.18.40 , ≤ 6.18.* (semver)
Unaffected: 7.1.5 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/sched/sch_hfsc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a425c82ff06cda5165e0de3de8c2a445ec1f863e",
              "status": "affected",
              "version": "72c61ffbeeb8c50f6d4d70c65d3283aa1bac57a7",
              "versionType": "git"
            },
            {
              "lessThan": "fc973ecd1a079b9a87c360478542f3a56dea085b",
              "status": "affected",
              "version": "a5efc95a33bd4fcb879250852828cc58c7862970",
              "versionType": "git"
            },
            {
              "lessThan": "15720cd8fa3fc625146128f89a8e11b0449a20a7",
              "status": "affected",
              "version": "0475c85426b18eccdcb7f9fb58d8f8e9c6c58c87",
              "versionType": "git"
            },
            {
              "lessThan": "b2a017bfcf565721918ec7355a373911d2f2a227",
              "status": "affected",
              "version": "9030a91235ae4845ec71902c3e0cecfc9ed1f2df",
              "versionType": "git"
            },
            {
              "lessThan": "9221a594c72a1446137926d4c2aa04e345f798dc",
              "status": "affected",
              "version": "d06476714d2819b550e0cc39222347e2c8941c9d",
              "versionType": "git"
            },
            {
              "lessThan": "66dbb13eeb2fc339f8f548a9076be4c1a94857b0",
              "status": "affected",
              "version": "51eb3b65544c9efd6a1026889ee5fb5aa62da3bb",
              "versionType": "git"
            },
            {
              "lessThan": "3a49bbae676fef1ffe548971e6229ae2adeb9d10",
              "status": "affected",
              "version": "51eb3b65544c9efd6a1026889ee5fb5aa62da3bb",
              "versionType": "git"
            },
            {
              "lessThan": "90b662ea25f5e83bb3b8ccec5b93ced810b92fb8",
              "status": "affected",
              "version": "51eb3b65544c9efd6a1026889ee5fb5aa62da3bb",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "9a5fd5c2f4d4afdd5e405083ee53e0789ce76956",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c1175c4ad01dbc9c979d099861fa90a754f72059",
              "versionType": "git"
            },
            {
              "lessThan": "5.10.261",
              "status": "affected",
              "version": "5.10.241",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.212",
              "status": "affected",
              "version": "5.15.190",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.178",
              "status": "affected",
              "version": "6.1.138",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.145",
              "status": "affected",
              "version": "6.6.90",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.97",
              "status": "affected",
              "version": "6.12.28",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.297",
              "versionType": "semver"
            },
            {
              "lessThan": "6.15",
              "status": "affected",
              "version": "6.14.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/sched/sch_hfsc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.15"
            },
            {
              "lessThan": "6.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.261",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.212",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.261",
                  "versionStartIncluding": "5.10.241",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.212",
                  "versionStartIncluding": "5.15.190",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.178",
                  "versionStartIncluding": "6.1.138",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.145",
                  "versionStartIncluding": "6.6.90",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.97",
                  "versionStartIncluding": "6.12.28",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.40",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.297",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.14.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_hfsc: Don\u0027t make class passive twice\n\nupdate_vf() is called from two places for the same class during a single\ndequeue when the class\u0027s child qdisc (e.g. codel/fq_codel) drops its last\npackets while dequeuing:\n\n1. The child calls qdisc_tree_reduce_backlog(), which, now that the child\n   is empty, invokes hfsc_qlen_notify() -\u003e update_vf(cl, 0, 0) and turns\n   the class passive (cl_nactive is decremented up the hierarchy).\n\n2. hfsc_dequeue() then calls update_vf(cl, qdisc_pkt_len(skb), cur_time)\n   to charge the dequeued bytes.\n\nOn the second call the class is already passive, but its child qdisc is\nstill empty, so update_vf() arms go_passive again:\n\n      if (cl-\u003eqdisc-\u003eq.qlen == 0 \u0026\u0026 cl-\u003ecl_flags \u0026 HFSC_FSC)\n              go_passive = 1;\n\nThe leaf is then skipped by the cl_nactive == 0 check inside the loop,\nwhich does not clear go_passive, so the stale go_passive propagates to the\nparent and decrements its cl_nactive a second time. A parent that still\nhas other active children is driven to cl_nactive == 0 and removed from\nthe vttree, even though those siblings are still backlogged. They are\nnever dequeued again and the qdisc stalls.\n\nFix this by only arming go_passive when the class is actually active, so an\nalready-passive class no longer triggers a second passive transition. The\nbyte accounting (cl-\u003ecl_total += len) still runs for every ancestor, so\ndequeued bytes continue to be counted exactly once."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T05:16:29.785Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a425c82ff06cda5165e0de3de8c2a445ec1f863e"
        },
        {
          "url": "https://git.kernel.org/stable/c/fc973ecd1a079b9a87c360478542f3a56dea085b"
        },
        {
          "url": "https://git.kernel.org/stable/c/15720cd8fa3fc625146128f89a8e11b0449a20a7"
        },
        {
          "url": "https://git.kernel.org/stable/c/b2a017bfcf565721918ec7355a373911d2f2a227"
        },
        {
          "url": "https://git.kernel.org/stable/c/9221a594c72a1446137926d4c2aa04e345f798dc"
        },
        {
          "url": "https://git.kernel.org/stable/c/66dbb13eeb2fc339f8f548a9076be4c1a94857b0"
        },
        {
          "url": "https://git.kernel.org/stable/c/3a49bbae676fef1ffe548971e6229ae2adeb9d10"
        },
        {
          "url": "https://git.kernel.org/stable/c/90b662ea25f5e83bb3b8ccec5b93ced810b92fb8"
        }
      ],
      "title": "net/sched: sch_hfsc: Don\u0027t make class passive twice",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-74284",
    "datePublished": "2026-08-15T05:57:53.290Z",
    "dateReserved": "2026-08-15T05:44:03.881Z",
    "dateUpdated": "2026-08-17T05:16:29.785Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-74284",
      "date": "2026-09-04",
      "epss": "0.00216",
      "percentile": "0.11951"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-74284\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-08-15T06:22:27.903\",\"lastModified\":\"2026-08-17T06:19:22.257\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet/sched: sch_hfsc: Don\u0027t make class passive twice\\n\\nupdate_vf() is called from two places for the same class during a single\\ndequeue when the class\u0027s child qdisc (e.g. codel/fq_codel) drops its last\\npackets while dequeuing:\\n\\n1. The child calls qdisc_tree_reduce_backlog(), which, now that the child\\n   is empty, invokes hfsc_qlen_notify() -\u003e update_vf(cl, 0, 0) and turns\\n   the class passive (cl_nactive is decremented up the hierarchy).\\n\\n2. hfsc_dequeue() then calls update_vf(cl, qdisc_pkt_len(skb), cur_time)\\n   to charge the dequeued bytes.\\n\\nOn the second call the class is already passive, but its child qdisc is\\nstill empty, so update_vf() arms go_passive again:\\n\\n      if (cl-\u003eqdisc-\u003eq.qlen == 0 \u0026\u0026 cl-\u003ecl_flags \u0026 HFSC_FSC)\\n              go_passive = 1;\\n\\nThe leaf is then skipped by the cl_nactive == 0 check inside the loop,\\nwhich does not clear go_passive, so the stale go_passive propagates to the\\nparent and decrements its cl_nactive a second time. A parent that still\\nhas other active children is driven to cl_nactive == 0 and removed from\\nthe vttree, even though those siblings are still backlogged. They are\\nnever dequeued again and the qdisc stalls.\\n\\nFix this by only arming go_passive when the class is actually active, so an\\nalready-passive class no longer triggers a second passive transition. The\\nbyte accounting (cl-\u003ecl_total += len) still runs for every ancestor, so\\ndequeued bytes continue to be counted exactly once.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/sched/sch_hfsc.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"72c61ffbeeb8c50f6d4d70c65d3283aa1bac57a7\",\"lessThan\":\"a425c82ff06cda5165e0de3de8c2a445ec1f863e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a5efc95a33bd4fcb879250852828cc58c7862970\",\"lessThan\":\"fc973ecd1a079b9a87c360478542f3a56dea085b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0475c85426b18eccdcb7f9fb58d8f8e9c6c58c87\",\"lessThan\":\"15720cd8fa3fc625146128f89a8e11b0449a20a7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9030a91235ae4845ec71902c3e0cecfc9ed1f2df\",\"lessThan\":\"b2a017bfcf565721918ec7355a373911d2f2a227\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d06476714d2819b550e0cc39222347e2c8941c9d\",\"lessThan\":\"9221a594c72a1446137926d4c2aa04e345f798dc\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"51eb3b65544c9efd6a1026889ee5fb5aa62da3bb\",\"lessThan\":\"66dbb13eeb2fc339f8f548a9076be4c1a94857b0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"51eb3b65544c9efd6a1026889ee5fb5aa62da3bb\",\"lessThan\":\"3a49bbae676fef1ffe548971e6229ae2adeb9d10\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"51eb3b65544c9efd6a1026889ee5fb5aa62da3bb\",\"lessThan\":\"90b662ea25f5e83bb3b8ccec5b93ced810b92fb8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9a5fd5c2f4d4afdd5e405083ee53e0789ce76956\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c1175c4ad01dbc9c979d099861fa90a754f72059\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5.10.241\",\"lessThan\":\"5.10.261\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.15.190\",\"lessThan\":\"5.15.212\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.1.138\",\"lessThan\":\"6.1.178\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.6.90\",\"lessThan\":\"6.6.145\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.12.28\",\"lessThan\":\"6.12.97\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.4.297\",\"lessThan\":\"5.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.14.6\",\"lessThan\":\"6.15\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/sched/sch_hfsc.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.15\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.15\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.261\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.212\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.178\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.145\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.97\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.40\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1.5\",\"lessThanOrEqual\":\"7.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/15720cd8fa3fc625146128f89a8e11b0449a20a7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/3a49bbae676fef1ffe548971e6229ae2adeb9d10\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/66dbb13eeb2fc339f8f548a9076be4c1a94857b0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/90b662ea25f5e83bb3b8ccec5b93ced810b92fb8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/9221a594c72a1446137926d4c2aa04e345f798dc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/a425c82ff06cda5165e0de3de8c2a445ec1f863e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/b2a017bfcf565721918ec7355a373911d2f2a227\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/fc973ecd1a079b9a87c360478542f3a56dea085b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-08-20T15:22:32+00:00",
      "cve": "CVE-2026-74284",
      "id": "CVE-2026-74284",
      "initial_release_date": "2026-08-15T00:00:00+00:00",
      "product_status:known_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net/sched: sch_hfsc: Don\u0027t make class passive twice",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74284.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.