In the Linux kernel, the following vulnerability has been resolved:
net_sched: ets: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of ets, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before doing the addition to cater for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-64k-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modules-extraUpgrade libperfUpgrade kernel-toolsUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debugUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64kUpgrade kernel-devel-matchedUpgrade kernel-rt-64kUpgrade kernel-64k-devel-matchedUpgrade python3-perfUpgrade perfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-debug-coreUpgrade rvUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-rt-64k-debugUpgrade kernel-64k-modules | Aug 19, 2025 | Aug 18, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.184-125.190Upgrade bpftool-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64 | Jun 10, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfoUpgrade kernel-toolsUpgrade perf6.12Upgrade kernel-headersUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade python3-perf6.12Upgrade perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel-libbpf-static | Jun 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | May 20, 2025 |
| Rocky_linux | — | Upgrade rvUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade libperf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-zfcpdump-debuginfoUpgrade rtlaUpgrade kernel-modules-extra | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade dtb-amdUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade dtb-marvellUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rtUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade dtb-xilinxUpgrade kernel-rt-vdsoUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade kernel-rt-extraUpgrade kernel-obs-build | Dec 5, 2025 | Aug 27, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-azure-6.14Upgrade linux-image-fips-5.15Upgrade linux-image-oracleUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-kvmUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-oracle-6.14Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-xilinxUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gcp-6.14Upgrade linux-image-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-5.15Upgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-aws-64k-6.14Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-kvm-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-virtual-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1007-oemUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-intelUpgrade linux-image-gke-64kUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-generic-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-24-generic | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub