In the Linux kernel, the following vulnerability has been resolved:
net_sched: ets: fix a race in ets_qdisc_change()
Gerrard Tai reported a race condition in ETS, whenever SFQ perturb timer fires at the wrong time.
The race is as follows:
CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()
This can be abused to underflow a parent's qlen.
Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.186-128.192Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.239-236.958Upgrade kernel-tools-develUpgrade perfUpgrade python-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel-libbpf-staticUpgrade perf6.12Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-libbpfUpgrade python3-perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-develUpgrade perf6.12-debuginfoUpgrade bpftool | Aug 5, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade dtb-renesasUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-freescaleUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade dtb-caviumUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-debugUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-source | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-raspiUpgrade linux-image-aws-fips-5.15Upgrade linux-image-awsUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-azure-lts-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oracle-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-aws-fips-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-6.14Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-fips-5.15Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-aws-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-aws-6.14Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-raspi-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-intelUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-nvidiaUpgrade linux-image-generic-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-virtual-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-xilinxUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-kvm-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azure-5.15Upgrade linux-image-azureUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-5.15.0-1092-aws-fips | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub