In the Linux kernel, the following vulnerability has been resolved:
net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y
syzbot reported a WARNING in est_timer() [1]
Problem here is that with CONFIG_PREEMPT_RT=y, timer callbacks can be preempted.
Adopt preempt_disable_nested()/preempt_enable_nested() to fix this.
[1] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 __seqprop_assert include/linux/seqlock.h:221 [inline] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 net/core/gen_estimator.c:93 Modules linked in: CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:__seqprop_assert include/linux/seqlock.h:221 [inline] RIP: 0010:est_timer+0x6dc/0x9f0 net/core/gen_estimator.c:93 Call Trace: <TASK> call_timer_fn+0x17e/0x5f0 kernel/time/timer.c:1747 expire_timers kernel/time/timer.c:1798 [inline] __run_timers kernel/time/timer.c:2372 [inline] __run_timer_base+0x648/0x970 kernel/time/timer.c:2384 run_timer_base kernel/time/timer.c:2393 [inline] run_timer_softirq+0xb7/0x180 kernel/time/timer.c:2403 handle_softirqs+0x22c/0x710 kernel/softirq.c:579 __do_softirq kernel/softirq.c:613 [inline] run_ktimerd+0xcf/0x190 kernel/softirq.c:1043 smpboot_thread_fn+0x53f/0xa60 kernel/smpboot.c:160 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.12Upgrade kernel6.12-headersUpgrade kernel6.12Upgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-tools-develUpgrade kernel6.12-libbpf-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-libbpf-develUpgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.12.46-66.121Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-libbpfUpgrade kernel6.12-toolsUpgrade kernel6.12-tools-debuginfo | Oct 16, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Oct 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Suse | — | Upgrade dtb-broadcomUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade dtb-appleUpgrade kernel-source-vanillaUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade dtb-amdUpgrade kernel-rt-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-allwinnerUpgrade dtb-socionextUpgrade dlm-kmp-64kbUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade dtb-lgUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-develUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-rtUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-devel | Dec 5, 2025 | Nov 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub