In the Linux kernel, the following vulnerability has been resolved:
net_sched: ets: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of ets, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before doing the addition to cater for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-develUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-64k-coreUpgrade rtlaUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-develUpgrade kernel-abi-stablelistsUpgrade kernel-rtUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade python3-perfUpgrade kernel-rt-64k-modules-extraUpgrade perfUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64kUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-develUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-debugUpgrade kernel-64kUpgrade rvUpgrade kernel-rt-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernelUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools | Aug 19, 2025 | Aug 18, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-devel | Jun 10, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade python3-perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel6.12Upgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade perf6.12-debuginfoUpgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12-modules-extraUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-headers | Jun 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | May 20, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-headersUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernelUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade perfUpgrade libperf-debuginfoUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-uki-virtUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-modules-core | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-xilinxUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-renesasUpgrade kernel-azureUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade kernel-syms-azureUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade dtb-mediatek | Dec 5, 2025 | Aug 27, 2025 |
| Ubuntu | — | Upgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-realtime-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-xilinxUpgrade linux-image-oem-22.04cUpgrade linux-image-intelUpgrade linux-image-gke-64kUpgrade linux-image-generic-6.14Upgrade linux-image-nvidia-tegraUpgrade linux-image-kvm-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-azureUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-realtimeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-generic-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-aws-64k-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracle | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub