In the Linux kernel, the following vulnerability has been resolved:
net_sched: drr: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of drr, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before adding to the list to cover for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.182-123.190Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-debuginfo-common-x86_64 | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-livepatch-6.12.29-33.102Upgrade perf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf | Jun 24, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kernel-64kbUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-azure-extraUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade dtb-lgUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-rtUpgrade gfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade kernel-rt_debug | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-xilinxUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-fips-5.15Upgrade linux-image-azureUpgrade linux-image-aws-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracle-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-oracle-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-awsUpgrade linux-image-aws-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-virtualUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-gke-64kUpgrade linux-image-genericUpgrade linux-image-intelUpgrade linux-image-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-azure-6.14Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-6.14.0-1007-oemUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1082-nvidia | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub