In the Linux kernel, the following vulnerability has been resolved:
net_sched: drr: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of drr, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before adding to the list to cover for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-livepatch-5.15.182-123.190Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.184-125.190Upgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfo | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-develUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-tools-develUpgrade kernel-livepatch-6.1.140-154.222Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernelUpgrade perf6.12Upgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfo | Jun 24, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perf | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perf | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-source-rtUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade dtb-exynosUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-develUpgrade kernel-debugUpgrade dtb-amazonUpgrade kernel-default-base-rebuildUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade kernel-defaultUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rt | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-azure-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gcp-5.15Upgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-6.14Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.14.0-1009-awsUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-gke-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-oracle-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-realtimeUpgrade linux-image-kvmUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-fips-5.15Upgrade linux-image-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-virtualUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-intelUpgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-6.14Upgrade linux-image-gkeUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1009-oracle | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub