In the Linux kernel, the following vulnerability has been resolved:
net_sched: ets: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of ets, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before doing the addition to cater for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modulesUpgrade rtlaUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-rt-64k-develUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rtUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernelUpgrade kernel-64kUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64kUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade libperfUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade python3-perfUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debugUpgrade kernel-64k-devel-matchedUpgrade bpftoolUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-modules-extraUpgrade perfUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-modules | Aug 19, 2025 | Aug 18, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade perf-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernelUpgrade bpftool-debuginfoUpgrade bpftool | Jun 10, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel6.12Upgrade python3-perf6.12Upgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-headersUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-devel | Jun 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | May 20, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade rtlaUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade libperfUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade libperf-debuginfoUpgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade kernel-develUpgrade kernel-tools-libs-devel | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade dtb-xilinxUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade dtb-broadcomUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-develUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade dlm-kmp-rtUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade kernel-rtUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade dlm-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade dtb-marvellUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-socionextUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-baseUpgrade kernel-syms-rt | Dec 5, 2025 | Aug 27, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-aws-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-aws-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-azure-6.14Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-virtualUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-genericUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-gke-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-nvidia-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-intelUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-generic-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-gcp-6.14Upgrade linux-image-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-xilinxUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.14.0-24-genericUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-6.14.0-1007-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-intel-iot-realtime | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 20, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub