In the Linux kernel, the following vulnerability has been resolved:
net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
TCA_MQPRIO_TC_ENTRY_INDEX is validated using NLA_POLICY_MAX(NLA_U32, TC_QOPT_MAX_QUEUE), which allows the value TC_QOPT_MAX_QUEUE (16). This leads to a 4-byte out-of-bounds stack write in the fp[] array, which only has room for 16 elements (0–15).
Fix this by changing the policy to allow only up to TC_QOPT_MAX_QUEUE - 1.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade rtlaUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-64k-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-debugUpgrade kernel-64kUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-64k-debugUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-64kUpgrade rvUpgrade kernel-64k-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-64k-debugUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-docUpgrade kernel-rt-64k-modulesUpgrade libperfUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-modules-extra | Feb 9, 2026 | Feb 2, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-develUpgrade perf6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-headersUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-toolsUpgrade bpftool6.12Upgrade kernel6.12-libbpf-staticUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-libbpf-develUpgrade kernel6.12-libbpfUpgrade perf6.12-debuginfoUpgrade kernel6.12-tools-debuginfo | Sep 30, 2025 | Aug 19, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2025 | Aug 19, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Feb 3, 2026 | Aug 19, 2025 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modules-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-develUpgrade perf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-devel-matched | Feb 9, 2026 | Feb 8, 2026 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-rt-vdsoUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade kernel-syms-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade kernel-azure-vdsoUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade dtb-exynosUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kernel-default-develUpgrade kernel-azure-optional | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azureUpgrade linux-image-azure-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-aws-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-64kUpgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-xilinxUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-6.14Upgrade linux-image-gkeopUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-azure-6.8Upgrade linux-image-fipsUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-azure-fipsUpgrade linux-image-awsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-realtime-6.14Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.14 | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub