In the Linux kernel, the following vulnerability has been resolved:
net_sched: ets: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of ets, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before doing the addition to cater for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-64k-debugUpgrade kernel-rt-64kUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernelUpgrade kernel-64kUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-develUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-coreUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade rvUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade bpftoolUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-coreUpgrade kernel-uki-virtUpgrade kernel-rt-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-64k-coreUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug | Aug 19, 2025 | Aug 18, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-debuginfo | Jun 10, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12Upgrade kernel-livepatch-6.12.29-33.102Upgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade python3-perf6.12-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel6.12Upgrade python3-perf6.12 | Jun 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | May 20, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade perfUpgrade perf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade rvUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade libperf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade rtlaUpgrade kernel-rt-modules-extraUpgrade libperfUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-kvm | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-kvmsmallUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade dtb-amdUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade dtb-apmUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rtUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kb | Dec 5, 2025 | Aug 27, 2025 |
| Ubuntu | — | Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-intelUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-raspi-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.14.0-24-genericUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-realtime-6.14Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-genericUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-6.14Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1009-awsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-generic-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-awsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-6.14Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-oracle-6.14Upgrade linux-image-kvmUpgrade linux-image-nvidia-64k-hwe-22.04 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub