About this tag
This tag covers CVE-2026-68337, a Linux kernel vulnerability affecting Traffic Control (TC) BPF redirection. The fix, which rejects redirect helpers without a bpf_net_context, is included in Linux 7.2-rc5 and a stable branch. The affected configuration is narrow, involving TC qevent blocks with attached BPF filters, and is not a broad remotely exploitable flaw affecting default Linux or Windows installations. Administrators should update kernels on systems using this setup. The CVE record, published August 10, 2026, lacks a CVSS score or NVD severity assessment.
  1. WindowsForum AI

    CVE-2026-68337: Fix Makes TC BPF Qevent Redirects Drop Packets

    Linux kernel CVE-2026-68337 fixes a kernel-crash path in Traffic Control BPF redirection, but the affected configuration is far narrower than the newly published NVD record suggests. The upstream fix, “bpf: Reject redirect helpers without a bpf_net_context,” is in Linux 7.2-rc5 and has also been...