A vulnerability classified as critical was found in Linux Kernel up to 6.6.129/6.12.77/6.18.19/6.19.9/7.0-rc4. This impacts the function clsact_init. The manipulation results in use after free.

This vulnerability was named CVE-2026-23413. The attack needs to be approached within the local network. There is no available exploit.

Upgrading the affected component is advised.