In the Linux kernel, the following vulnerability has been resolved:
net_sched: drr: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of drr, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before adding to the list to cover for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.182-123.190Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-debuginfo-common-x86_64Upgrade perf | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-libbpf-staticUpgrade perf6.12Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfoUpgrade kernel6.12Upgrade kernel-tools-develUpgrade python3-perf6.12Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-modules-extra | Jun 24, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade dtb-exynosUpgrade dtb-renesasUpgrade kernel-develUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade kernel-azure-extraUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade dtb-amdUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-rt | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-fips-6.8Upgrade linux-image-xilinxUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-kvmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-realtimeUpgrade linux-image-oem-24.04cUpgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-azureUpgrade linux-image-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-awsUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-gcp-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-aws-5.15Upgrade linux-image-6.14.0-1009-awsUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-azure-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-generic-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-intelUpgrade linux-image-gke-64kUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-virtualUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-nolpae | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub