In the Linux kernel, the following vulnerability has been resolved:
net_sched: drr: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of drr, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before adding to the list to cover for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.184-125.190Upgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.182-123.190Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfo | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernelUpgrade kernel6.12Upgrade kernel-tools-develUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade kernel-toolsUpgrade perf6.12Upgrade kernel-libbpf-staticUpgrade perfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12-debuginfo | Jun 24, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade bpftool | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade dtb-sprdUpgrade kernel-default-develUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade dtb-lgUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-exynosUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-64kbUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-develUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade dtb-alteraUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-nvidiaUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-azureUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rt | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtualUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-gkeopUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-gke-64kUpgrade linux-image-intelUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gkeUpgrade linux-image-nvidia-tegraUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-6.14Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidiaUpgrade linux-image-azure-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-azure-6.14Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-realtime-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-xilinxUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-raspi-5.15Upgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-24.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-azure-fipsUpgrade linux-image-raspi-6.14Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-gkeop-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-xilinx-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-azureUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-144-generic-64k | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub