In the Linux kernel, the following vulnerability has been resolved:
net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y
syzbot reported a WARNING in est_timer() [1]
Problem here is that with CONFIG_PREEMPT_RT=y, timer callbacks can be preempted.
Adopt preempt_disable_nested()/preempt_enable_nested() to fix this.
[1] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 __seqprop_assert include/linux/seqlock.h:221 [inline] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 net/core/gen_estimator.c:93 Modules linked in: CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:__seqprop_assert include/linux/seqlock.h:221 [inline] RIP: 0010:est_timer+0x6dc/0x9f0 net/core/gen_estimator.c:93 Call Trace: <TASK> call_timer_fn+0x17e/0x5f0 kernel/time/timer.c:1747 expire_timers kernel/time/timer.c:1798 [inline] __run_timers kernel/time/timer.c:2372 [inline] __run_timer_base+0x648/0x970 kernel/time/timer.c:2384 run_timer_base kernel/time/timer.c:2393 [inline] run_timer_softirq+0xb7/0x180 kernel/time/timer.c:2403 handle_softirqs+0x22c/0x710 kernel/softirq.c:579 __do_softirq kernel/softirq.c:613 [inline] run_ktimerd+0xcf/0x190 kernel/softirq.c:1043 smpboot_thread_fn+0x53f/0xa60 kernel/smpboot.c:160 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 </TASK>
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-livepatch-6.12.46-66.121Upgrade perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpfUpgrade kernel6.12-toolsUpgrade kernel6.12-modules-extra-commonUpgrade python3-perf6.12Upgrade kernel6.12-tools-develUpgrade perf6.12Upgrade kernel6.12Upgrade kernel6.12-headersUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-develUpgrade kernel6.12-libbpf-debuginfo | Oct 16, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Oct 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade dlm-kmp-rtUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-default-baseUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade dtb-socionextUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dtb-lgUpgrade dtb-amazonUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-64kb | Dec 5, 2025 | Nov 6, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub