In the Linux kernel, the following vulnerability has been resolved:
net_sched: red: fix a race in __red_change()
Gerrard Tai reported a race condition in RED, whenever SFQ perturb timer fires at the wrong time.
The race is as follows:
CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()
This can be abused to underflow a parent's qlen.
Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.239-236.958Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.186-128.192 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel6.12Upgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.1.144-170.251Upgrade kernel-libbpf-debuginfoUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | Aug 5, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade kernel-azure-extraUpgrade dtb-armUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-debug-develUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-rt_debugUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade dtb-caviumUpgrade kernel-develUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-symsUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-default-manUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-apmUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade dtb-qcomUpgrade dtb-lgUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-64kb-optional | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-6.14Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-lowlatencyUpgrade linux-image-aws-6.8Upgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-raspi-5.15Upgrade linux-image-aws-64kUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-gcpUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-virtualUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-xilinx-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtime-6.14Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-ibm-5.15Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-gke-6.8Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-fips-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-gcp-5.15Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-64k-6.14Upgrade linux-image-ibm-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-5.15Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oem-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-virtual-5.15Upgrade linux-image-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-24.04 | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub