In the Linux kernel, the following vulnerability has been resolved:
net_sched: red: fix a race in __red_change()
Gerrard Tai reported a race condition in RED, whenever SFQ perturb timer fires at the wrong time.
The race is as follows:
CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()
This can be abused to underflow a parent's qlen.
Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-livepatch-5.10.239-236.958Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.186-128.192Upgrade kernel-tools-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-x86_64Upgrade perfUpgrade kernel-debuginfoUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.144-170.251Upgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-headersUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade perf6.12 | Aug 5, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelists | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade dtb-qcomUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-source-azureUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade dtb-xilinxUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-develUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade kernel-rt-optional | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-fips-6.8Upgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-kvmUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-oem-24.04cUpgrade linux-image-oracle-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeopUpgrade linux-image-generic-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegraUpgrade linux-image-fipsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-ibm-5.15Upgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-realtime-6.14Upgrade linux-image-gke-5.15Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-oem-22.04cUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-xilinxUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-realtime-hwe-24.04 | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub