In the Linux kernel, the following vulnerability has been resolved:
net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
TCA_MQPRIO_TC_ENTRY_INDEX is validated using NLA_POLICY_MAX(NLA_U32, TC_QOPT_MAX_QUEUE), which allows the value TC_QOPT_MAX_QUEUE (16). This leads to a 4-byte out-of-bounds stack write in the fp[] array, which only has room for 16 elements (0–15).
Fix this by changing the policy to allow only up to TC_QOPT_MAX_QUEUE - 1.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-debugUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernelUpgrade perfUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-64kUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-debugUpgrade kernel-uki-virtUpgrade kernel-debug-uki-virtUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-rt-64k-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-modules-coreUpgrade rvUpgrade kernel-64k-debugUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade libperfUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-rt-64kUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-docUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelists | Feb 9, 2026 | Feb 2, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel6.12-headersUpgrade kernel6.12-develUpgrade bpftool6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpfUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.46-66.121Upgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-tools-devel | Sep 30, 2025 | Aug 19, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2025 | Aug 19, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Feb 3, 2026 | Aug 19, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-matchedUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade rtlaUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade libperf-debuginfoUpgrade libperfUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade kernel-debuginfo-common-s390xUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade rvUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules | Feb 9, 2026 | Feb 8, 2026 |
| Suse | — | Upgrade dtb-armUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-rt-develUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatchUpgrade kernel-default-baseUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade kernel-rtUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-develUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade reiserfs-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade dtb-amdUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade dtb-appleUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade ocfs2-kmp-azureUpgrade dtb-amlogic | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azureUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gkeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gcp-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-ibmUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-generic-64kUpgrade linux-image-azure-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-xilinxUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-oracleUpgrade linux-image-generic-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-awsUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-kvmUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-aws-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-lowlatency-hwe-22.04 | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub