Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-74704

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
22/08/2026
Última modificación:
22/08/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter<br /> <br /> The sch_cake ACK filter parses packets to find the TCP header and filter<br /> duplicated ACKs if the flow is backlogged. The parsing code contains a<br /> WARN_ON(1) which can be triggered by a malformed IP header in certain<br /> cases. Depending on the system configuration, this leads either to<br /> either spamming dmesg with warnings, or a panic if panic_on_warn is set.<br /> <br /> The code already correctly skips the offending packet in the branch that<br /> triggers the warning, so the WARN_ON itself doesn&amp;#39;t really serve any<br /> purpose. So just drop it altogether to avoid the inconvenient side<br /> effects.

Impacto