In the Linux kernel, the following vulnerability has been resolved:
net_sched: red: fix a race in __red_change()
Gerrard Tai reported a race condition in RED, whenever SFQ perturb timer fires at the wrong time.
The race is as follows:
CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()
This can be abused to underflow a parent's qlen.
Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.186-128.192Upgrade kernel-livepatch-5.10.239-236.958Upgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel6.12Upgrade kernel-libbpf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.35-55.103Upgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.144-170.251Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-modules-extraUpgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade python3-perf6.12Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade perf6.12 | Aug 5, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-rt-optional | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gcp-6.14Upgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-virtualUpgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gke-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-intelUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-ibmUpgrade linux-image-ibm-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-xilinx-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-realtime-5.15Upgrade linux-image-aws-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gkeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-aws-6.14Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-oem-24.04cUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-virtual-6.14Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-realtime | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub