In the Linux kernel, the following vulnerability has been resolved:
net_sched: ets: fix a race in ets_qdisc_change()
Gerrard Tai reported a race condition in ETS, whenever SFQ perturb timer fires at the wrong time.
The race is as follows:
CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()
This can be abused to underflow a parent's qlen.
Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perfUpgrade python-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.239-236.958Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.186-128.192Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade python3-perf6.12Upgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perf6.12Upgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel6.12 | Aug 5, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-sourceUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-debugUpgrade dtb-amazonUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-source-azureUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-defaultUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade dtb-amdUpgrade kernel-kvmsmallUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-docsUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-default | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-virtual-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-realtimeUpgrade linux-image-ibmUpgrade linux-image-ibm-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-gke-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-virtual-6.14Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-raspi-5.15Upgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-azure-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtualUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-generic-6.14Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub