In the Linux kernel, the following vulnerability has been resolved:
net_sched: drr: Fix double list add in class with netem as child qdisc
As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of drr, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.
In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before adding to the list to cover for the reentrant case.
[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.182-123.190Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernelUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.12-debuginfoUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade perfUpgrade perf6.12Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-debuginfoUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade python3-perf6.12Upgrade kernel-modules-extraUpgrade kernel6.12-debuginfoUpgrade kernel6.12Upgrade kernel-tools-develUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python3-perfUpgrade kernel6.12-debuginfo-common-aarch64 | Jun 24, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade dtb-caviumUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade kernel-default-develUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-develUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdump | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gke-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gke-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-intelUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-gkeopUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.14.0-24-genericUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-xilinxUpgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-azure-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-virtual-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-awsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-oracleUpgrade linux-image-azure-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-kvmUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-aws-5.15Upgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1009-oracle-64k | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub