In the Linux kernel, the following vulnerability has been resolved:
net_sched: drr: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of drr, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before adding to the list to cover for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-livepatch-5.15.182-123.190Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-debuginfo | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade python3-perf6.12Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel6.12Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade perf6.12Upgrade perfUpgrade bpftoolUpgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-debuginfoUpgrade kernel-tools | Jun 24, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade dtb-marvellUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade dtb-appleUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade dtb-nvidiaUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade dtb-freescaleUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-extra | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-nvidia-5.15Upgrade linux-image-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-azure-6.14Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gke-64kUpgrade linux-image-intelUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-ibm-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-aws-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.14.0-1007-oemUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-gkeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-genericUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-generic-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcpUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-awsUpgrade linux-image-virtual-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-gcp-6.14Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-xilinxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-aws-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-oem-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-virtual-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-22.04d | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub