CVE record · CVE-2026-97959

net/sched: cls_route: free emptied bucket on filter move

No CVSS scoreEPSS 0.0018 · 7th percentile

Published by the CVE Program (CNA: Linux) at 25 Sept 2026, 10:23 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 1e052be69d045c8d0f82ff1116fd3e5a79661745 to before 9e7741b41a25b9d49df4d262fa314342e6f95c50 git
  • affected 1e052be69d045c8d0f82ff1116fd3e5a79661745 to before 48d38bf8c22a05fde07ba1f885cde27b851649a2 git
  • affected 1e052be69d045c8d0f82ff1116fd3e5a79661745 to before cc99d26b12431e4e4d0e346ec32764eb42c0aed9 git
  • affected 1e052be69d045c8d0f82ff1116fd3e5a79661745 to before 41e94079200aaf0cdbe4594b0af75710b33da124 git
  • affected 1e052be69d045c8d0f82ff1116fd3e5a79661745 to before 2e2f130951d34871b0643bf700164d97cff4b427 git
  • affected 1e052be69d045c8d0f82ff1116fd3e5a79661745 to before f8495d67434e1cb7e511297687ca55fdb28e4c20 git
  • affected 1e052be69d045c8d0f82ff1116fd3e5a79661745 to before 81dd117c04422c6d0c7974aba9fa6a0ba370959b git
  • affected 1e052be69d045c8d0f82ff1116fd3e5a79661745 to before 1853f30cf5c84971f99788a76207c6f745380896 git
Other versions: unaffected
Linux Linux
  • affected 4.1
  • unaffected before 4.1 semver
  • unaffected 5.10.271 to 5.10.*, inclusive semver
  • unaffected 5.15.222 to 5.15.*, inclusive semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.111 to 6.12.*, inclusive semver
  • unaffected 6.18.53 to 6.18.*, inclusive semver
  • unaffected 7.2.7 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-97959
CNA
Linux
Published
25 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0018, the 7th percentile, on 11 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 25 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.