In the Linux kernel, the following vulnerability has been resolved:
net_sched: drr: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of drr, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before adding to the list to cover for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade perfUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-headersUpgrade kernel-livepatch-5.15.182-123.190Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel6.12Upgrade python3-perfUpgrade kernelUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade python3-perf6.12Upgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel6.12-modules-extraUpgrade kernel-debuginfoUpgrade kernel6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf6.12Upgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade perfUpgrade python3-perf6.12-debuginfoUpgrade bpftool | Jun 24, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade dtb-amdUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade kernel-default-extraUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-azureUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azure | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-generic-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.14.0-24-genericUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-fipsUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oem-6.14Upgrade linux-image-virtualUpgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-aws-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-gke-64kUpgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-6.14Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-fips-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-xilinxUpgrade linux-image-raspi-5.15Upgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-realtimeUpgrade linux-image-oem-24.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-kvmUpgrade linux-image-gke-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-aws-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-raspi-6.14Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1044-ibm | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub