In the Linux kernel, the following vulnerability has been resolved:
net_sched: ets: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of ets, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before doing the addition to cater for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-64k-modules-coreUpgrade rtlaUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-64k-develUpgrade kernel-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64kUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade python3-perfUpgrade kernel-rt-64k-debug-modules-extraUpgrade perfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-toolsUpgrade rvUpgrade kernel-64kUpgrade kernel-64k-coreUpgrade kernel-rt-64k-debug-develUpgrade bpftoolUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-debug-modules | Aug 19, 2025 | Aug 18, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-tools-devel | Jun 10, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade perf6.12-debuginfoUpgrade bpftoolUpgrade python3-perf6.12Upgrade kernel-libbpfUpgrade kernel6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-modules-extra-commonUpgrade bpftool-debuginfo | Jun 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | May 20, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-coreUpgrade libperf-debuginfoUpgrade rvUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virtUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-coreUpgrade perfUpgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade libperfUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modules-core | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade kernel-debug-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade dtb-armUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade dtb-alteraUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade dlm-kmp-64kbUpgrade dtb-renesasUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-source-azureUpgrade kernel-develUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kb | Dec 5, 2025 | Aug 27, 2025 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-generic-64k-6.14Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-kvmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gkeUpgrade linux-image-azure-fipsUpgrade linux-image-awsUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-aws-6.14Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-intelUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.14.0-1007-oemUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-5.15Upgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-fips-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-xilinxUpgrade linux-image-oem-22.04Upgrade linux-image-realtime-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-azureUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-lowlatency | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub