In the Linux kernel, the following vulnerability has been resolved:
net_sched: ets: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of ets, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before doing the addition to cater for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64kUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64kUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-debug-develUpgrade bpftoolUpgrade kernel-64k-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-kvmUpgrade libperfUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade rvUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debugUpgrade kernelUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-coreUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade rtlaUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-64k-develUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-64k-modules-core | Aug 19, 2025 | Aug 18, 2025 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | Jun 10, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-debuginfoUpgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel6.12Upgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade perf6.12Upgrade kernel-libbpf-develUpgrade kernel6.12-modules-extraUpgrade kernel-toolsUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-headersUpgrade bpftool-debuginfo | Jun 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | May 20, 2025 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-uki-virt-addonsUpgrade perfUpgrade perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade libperf-debuginfoUpgrade rvUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernelUpgrade rtlaUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade libperf | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade dtb-renesasUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-64kb-optionalUpgrade kernel-source-vanillaUpgrade dtb-xilinxUpgrade kernel-64kbUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade dtb-marvellUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-docs | Dec 5, 2025 | Aug 27, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04dUpgrade linux-image-gkeopUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-azureUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-24.04cUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-generic-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1009-awsUpgrade linux-image-oracle-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-intelUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-aws-fips-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidiaUpgrade linux-image-gcp-6.14Upgrade linux-image-kvm-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-azure-5.15Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-xilinx-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-awsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-virtualUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-6.14Upgrade linux-image-gkeop-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-fips-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub