In the Linux kernel, the following vulnerability has been resolved:
net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y
syzbot reported a WARNING in est_timer() [1]
Problem here is that with CONFIG_PREEMPT_RT=y, timer callbacks can be preempted.
Adopt preempt_disable_nested()/preempt_enable_nested() to fix this.
[1] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 __seqprop_assert include/linux/seqlock.h:221 [inline] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 net/core/gen_estimator.c:93 Modules linked in: CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:__seqprop_assert include/linux/seqlock.h:221 [inline] RIP: 0010:est_timer+0x6dc/0x9f0 net/core/gen_estimator.c:93 Call Trace: <TASK> call_timer_fn+0x17e/0x5f0 kernel/time/timer.c:1747 expire_timers kernel/time/timer.c:1798 [inline] __run_timers kernel/time/timer.c:2372 [inline] __run_timer_base+0x648/0x970 kernel/time/timer.c:2384 run_timer_base kernel/time/timer.c:2393 [inline] run_timer_softirq+0xb7/0x180 kernel/time/timer.c:2403 handle_softirqs+0x22c/0x710 kernel/softirq.c:579 __do_softirq kernel/softirq.c:613 [inline] run_ktimerd+0xcf/0x190 kernel/softirq.c:1043 smpboot_thread_fn+0x53f/0xa60 kernel/smpboot.c:160 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool6.12Upgrade kernel6.12-libbpf-develUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-staticUpgrade bpftool6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-headersUpgrade kernel6.12-modules-extra-commonUpgrade perf6.12Upgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-develUpgrade kernel6.12-tools-develUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12 | Oct 16, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Oct 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade dtb-apmUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-symsUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade kernel-sourceUpgrade kernel-64kbUpgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade dtb-caviumUpgrade dtb-lgUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optional | Dec 5, 2025 | Nov 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub