In the Linux kernel, the following vulnerability has been resolved:
net_sched: red: fix a race in __red_change()
Gerrard Tai reported a race condition in RED, whenever SFQ perturb timer fires at the wrong time.
The race is as follows:
CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()
This can be abused to underflow a parent's qlen.
Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.186-128.192Upgrade bpftoolUpgrade kernel-develUpgrade kernel-livepatch-5.10.239-236.958Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade perf6.12Upgrade bpftool-debuginfoUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade python3-perf6.12Upgrade kernel-livepatch-6.1.144-170.251Upgrade kernel-libbpf-debuginfoUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12Upgrade kernel-headersUpgrade perf6.12-debuginfo | Aug 5, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-develUpgrade kselftests-kmp-rtUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade dtb-exynosUpgrade dtb-alteraUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-default-manUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade dtb-freescaleUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-extra | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gkeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-raspi-6.14Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-aws-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-generic-6.14Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-azure-6.8Upgrade linux-image-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-5.15Upgrade linux-image-intelUpgrade linux-image-azure-fips-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-realtimeUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-awsUpgrade linux-image-aws-6.14Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gke-64kUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-6.14 | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub