In the Linux kernel, the following vulnerability has been resolved:
net: sched: Fix use after free in red_enqueue()
We can't use "skb" again after passing it to qdisc_enqueue(). This is basically identical to commit 2f09707d0c97 ("sch_sfb: Also store skb len before calling child enqueue").
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-develUpgrade python-perfUpgrade bpftoolUpgrade kernel-livepatch-5.15.79-51.138Upgrade perfUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.155-138.670Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.299-223.520Upgrade kernel-headers | Jul 9, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Aug 13, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-gkeUpgrade linux-raspi-5.4Upgrade linux-iotUpgrade linux-aws-5.4Upgrade linux-lts-xenialUpgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-ibm-5.4Upgrade linux-bluefieldUpgrade linuxUpgrade linux-oracle-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-fipsUpgrade linux-gcp-5.15Upgrade linux-hweUpgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-azureUpgrade linux-riscv-5.15Upgrade linux-nvidiaUpgrade linux-ibmUpgrade linux-lowlatencyUpgrade linux-oracleUpgrade linux-azure-4.15Upgrade linux-kvmUpgrade linux-gcp-fipsUpgrade linux-aws-hweUpgrade linux-xilinx-zynqmpUpgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-azure-5.15Upgrade linux-hwe-5.4Upgrade linux-intel-iotgUpgrade linux-hwe-5.15Upgrade linux-gcp-4.15Upgrade linux-oracle-5.15Upgrade linux-gcp-5.4Upgrade linux-realtimeUpgrade linux-azure-5.4 | May 6, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub