In the Linux kernel, the following vulnerability has been resolved:
net_sched: drr: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of drr, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before adding to the list to cover for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.182-123.190Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-tools-devel | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.140-154.222Upgrade python3-perf6.12Upgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade kernel-tools-develUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel6.12Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf | Jun 24, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftool | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-azureUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade dtb-amdUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-azureUpgrade dtb-qcomUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-devel | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-fipsUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-nvidiaUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-intelUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-aws-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-virtual-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-fips-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-24.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-gcp-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-6.14Upgrade linux-image-fips-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-xilinxUpgrade linux-image-azure-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-azure-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-20.04d | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub