In the Linux kernel, the following vulnerability has been resolved:
net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
TCA_MQPRIO_TC_ENTRY_INDEX is validated using NLA_POLICY_MAX(NLA_U32, TC_QOPT_MAX_QUEUE), which allows the value TC_QOPT_MAX_QUEUE (16). This leads to a 4-byte out-of-bounds stack write in the fp[] array, which only has room for 16 elements (0–15).
Fix this by changing the policy to allow only up to TC_QOPT_MAX_QUEUE - 1.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-64kUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-uki-virtUpgrade kernel-cross-headersUpgrade kernel-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-64k-debugUpgrade kernel-64k-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade rvUpgrade kernel-rt-64kUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-devel-matchedUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump | Feb 9, 2026 | Feb 2, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-headersUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-develUpgrade kernel6.12-debuginfoUpgrade perf6.12Upgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.46-66.121Upgrade perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade bpftool6.12Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12-tools-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-toolsUpgrade kernel6.12-tools-debuginfo | Sep 30, 2025 | Aug 19, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2025 | Aug 19, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Feb 3, 2026 | Aug 19, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-uki-virtUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade rtlaUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade libperfUpgrade kernel-zfcpdump-modulesUpgrade libperf-debuginfoUpgrade rvUpgrade kernel-uki-virt-addonsUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade perfUpgrade kernel-zfcpdump-devel-matched | Feb 9, 2026 | Feb 8, 2026 |
| Suse | — | Upgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-64kb-extraUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-rt-develUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade kernel-default-develUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade kernel-syms-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade dtb-exynosUpgrade kernel-macros | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidiaUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-raspi-6.14Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-generic-6.14Upgrade linux-image-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-xilinxUpgrade linux-image-oem-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-raspi-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-awsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-oracle-6.14Upgrade linux-image-oracleUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04 | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub