In the Linux kernel, the following vulnerability has been resolved:
net_sched: ets: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of ets, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before doing the addition to cater for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade rvUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-64kUpgrade kernel-64k-debug-modules-extraUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-debug-modulesUpgrade libperfUpgrade kernel-rtUpgrade kernel-64k-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debugUpgrade python3-perfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-toolsUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-debug-coreUpgrade bpftoolUpgrade kernel-64k-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-docUpgrade kernel-rt-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-64k-coreUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-64k-debug-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modulesUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-64k-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-modules | Aug 19, 2025 | Aug 18, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernelUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Jun 10, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel-headersUpgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade perf6.12Upgrade bpftool-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel6.12-modules-extraUpgrade kernel-toolsUpgrade kernel-modules-extra-common | Jun 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | May 20, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade rtlaUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade libperfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-s390xUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade python3-perf-debuginfoUpgrade rv | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-rockchipUpgrade kernel-rt_debugUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade dtb-hisiliconUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatch-develUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade kernel-rtUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade kernel-develUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdso | Dec 5, 2025 | Aug 27, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-raspi-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-gcp-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-realtime-6.14Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gcp-6.14Upgrade linux-image-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1007-oemUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-intelUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-6.14Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-aws-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtual-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-virtualUpgrade linux-image-oracle-6.14Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-generic-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-azure-6.14Upgrade linux-image-awsUpgrade linux-image-gcp-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-realtimeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-100-generic-64k | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 20, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub