# net/sched: cls_route: free emptied bucket on filter move

CVE record · `CVE-2026-97959`

- **Identifiers:** `CVE-2026-97959`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 25 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 25 Sept 2026, 10:23 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `1e052be69d045c8d0f82ff1116fd3e5a79661745 to before 9e7741b41a25b9d49df4d262fa314342e6f95c50` (git)
  - affected: `1e052be69d045c8d0f82ff1116fd3e5a79661745 to before 48d38bf8c22a05fde07ba1f885cde27b851649a2` (git)
  - affected: `1e052be69d045c8d0f82ff1116fd3e5a79661745 to before cc99d26b12431e4e4d0e346ec32764eb42c0aed9` (git)
  - affected: `1e052be69d045c8d0f82ff1116fd3e5a79661745 to before 41e94079200aaf0cdbe4594b0af75710b33da124` (git)
  - affected: `1e052be69d045c8d0f82ff1116fd3e5a79661745 to before 2e2f130951d34871b0643bf700164d97cff4b427` (git)
  - affected: `1e052be69d045c8d0f82ff1116fd3e5a79661745 to before f8495d67434e1cb7e511297687ca55fdb28e4c20` (git)
  - affected: `1e052be69d045c8d0f82ff1116fd3e5a79661745 to before 81dd117c04422c6d0c7974aba9fa6a0ba370959b` (git)
  - affected: `1e052be69d045c8d0f82ff1116fd3e5a79661745 to before 1853f30cf5c84971f99788a76207c6f745380896` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `4.1`
  - unaffected: `before 4.1` (semver)
  - unaffected: `5.10.271 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.222 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.189 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.158 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.111 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.53 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.7 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0018, the 7th percentile, on 12 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 25 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-97959](https://www.cve.org/CVERecord?id=CVE-2026-97959)
- [NVD: CVE-2026-97959](https://nvd.nist.gov/vuln/detail/CVE-2026-97959)

### References from the CNA

- <https://git.kernel.org/stable/c/9e7741b41a25b9d49df4d262fa314342e6f95c50>
- <https://git.kernel.org/stable/c/48d38bf8c22a05fde07ba1f885cde27b851649a2>
- <https://git.kernel.org/stable/c/cc99d26b12431e4e4d0e346ec32764eb42c0aed9>
- <https://git.kernel.org/stable/c/41e94079200aaf0cdbe4594b0af75710b33da124>
- <https://git.kernel.org/stable/c/2e2f130951d34871b0643bf700164d97cff4b427>
- <https://git.kernel.org/stable/c/f8495d67434e1cb7e511297687ca55fdb28e4c20>
- <https://git.kernel.org/stable/c/81dd117c04422c6d0c7974aba9fa6a0ba370959b>
- <https://git.kernel.org/stable/c/1853f30cf5c84971f99788a76207c6f745380896>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-97959>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-97959/>. Everything for agents: <https://agentprime.io/llms.txt>.