In the Linux kernel, the following vulnerability has been resolved:

net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter

The sch_cake ACK filter parses packets to find the TCP header and filter
duplicated ACKs if the flow is backlogged. The parsing code contains a
WARN_ON(1) which can be triggered by a malformed IP header in certain
cases. Depending on the system configuration, this leads either to
either spamming dmesg with warnings, or a panic if panic_on_warn is set.

The code already correctly skips the offending packet in the branch that
triggers the warning, so the WARN_ON itself doesn't really serve any
purpose. So just drop it altogether to avoid the inconvenient side
effects.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0c4882bff34558d8d53fb04c3e96da5c327c7dc8 cve-icon cve-icon
https://git.kernel.org/stable/c/2504a76e5c0694e14e15562730e1339f2d9f9458 cve-icon cve-icon
https://git.kernel.org/stable/c/2a33516f9ef59ad11844d4fc152f889449b5daf3 cve-icon cve-icon
https://git.kernel.org/stable/c/a1ae353d8355407c1bea971d1c1af5e7f242bb7d cve-icon cve-icon
https://git.kernel.org/stable/c/a4b52612004a5639c4bfc30ba93ba414b8326e2a cve-icon cve-icon
https://git.kernel.org/stable/c/ae1b2f8e21a41e7c7e75511bea0c4ccc59ec1bd3 cve-icon cve-icon
https://git.kernel.org/stable/c/c1693b7844a6c06d31a565e5a494948034dfd235 cve-icon cve-icon
https://git.kernel.org/stable/c/cd2f1d9fe8a507c2dc86ad326fe221f121c47734 cve-icon cve-icon
History

Sat, 22 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-754

Sat, 22 Aug 2026 15:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter The sch_cake ACK filter parses packets to find the TCP header and filter duplicated ACKs if the flow is backlogged. The parsing code contains a WARN_ON(1) which can be triggered by a malformed IP header in certain cases. Depending on the system configuration, this leads either to either spamming dmesg with warnings, or a panic if panic_on_warn is set. The code already correctly skips the offending packet in the branch that triggers the warning, so the WARN_ON itself doesn't really serve any purpose. So just drop it altogether to avoid the inconvenient side effects.
Title net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-22T15:33:03.491Z

Reserved: 2026-08-15T05:44:03.927Z

Link: CVE-2026-74704

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-22T16:16:45.090

Modified: 2026-08-22T16:16:45.090

Link: CVE-2026-74704

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-22T18:15:03Z

Weaknesses