https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:52:48 +0000 https://vulnerability.circl.lu/vuln/cve-2025-37914 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net_sched: ets: Fix double list add in class with netem as child qdisc</p> <p>As described in Gerrard&#39;s report [1], there are use cases where a netem child qdisc will make the parent qdisc&#39;s enqueue callback reentrant. In the case of ets, there won&#39;t be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.</p> <p>In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before doing the addition to cater for the reentrant case.</p> <p>[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net_sched: ets: Fix double list add in class with netem as child qdisc</p> <p>As described in Gerrard&#39;s report [1], there are use cases where a netem child qdisc will make the parent qdisc&#39;s enqueue callback reentrant. In the case of ets, there won&#39;t be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption.</p> <p>In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before doing the addition to cater for the reentrant case.</p> <p>[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/</p> https://vulnerability.circl.lu/vuln/cve-2025-37914