In the Linux kernel, the following vulnerability has been resolved:
net_sched: drr: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of drr, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before adding to the list to cover for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade python-perfUpgrade kernel-headersUpgrade kernel-livepatch-5.10.238-231.953Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.182-123.190Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-devel | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-debuginfoUpgrade kernel-toolsUpgrade perf6.12Upgrade perfUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel6.12Upgrade kernel-livepatch-6.1.140-154.222Upgrade python3-perfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel6.12-modules-extraUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-debuginfoUpgrade kernel6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade perf6.12-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade python3-perf6.12Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-headers | Jun 24, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade dtb-apmUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-symsUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-exynosUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-extra | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1009-awsUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-fips-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-gcp-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-raspi-5.15Upgrade linux-image-xilinxUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-aws-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-azureUpgrade linux-image-azure-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-genericUpgrade linux-image-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-intelUpgrade linux-image-gke-64kUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-virtualUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-ibm-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-aws-6.8 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub