TechLobstersabout 11 hours ago
Linux Kernel 0-Day Exploits Red Scheduler Bug
1 min read
A Linux kernel 0-day in the red network scheduler turns a limited slab use-after-free into physical memory read/write. The bug, introduced in commit 3f14b37 (January 2024) and fixed in commit a8a0289 (June 2026), affects Red Hat systems with unprivileged user namespaces enabled. The missing TC_ACT_CONSUMED case in tcf_qevent_handle allows a dangling pointer write via fragmented packets.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
