In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Savino says: "We are writing to report that this rece…
高危 CVSS 7.8
摘要
In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Savino says: "We are writing to report that this recent patch (141d34391abbb315d68556b7c67ad97885407547) [1] can be bypassed, and a UAF can still occur when HFSC is utilized with NETEM. The patch only checks the cl->cl_nactive field to determine whether it is the first insertion or not [2], but this field is only incremented b…
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
- :
Lint 边界警告 (2)
以下是本次研判 lint 阶段发现的非阻塞性警告(如引用 URL 未在白名单内)。这些不影响漏洞条目可用性,仅为透明度披露(参 DR-002)。
-
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://syst3mfailure.io/rbtree-family-drama/ -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://syst3mfailure.io/rbtree-family-drama/
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/295f7c579b07b5b7cf2dffe485f71cc2f27647cb Patch
- https://git.kernel.org/stable/c/2c928b3a0b04a431ffcd6c8b7d88a267124a3a28 Patch
- https://git.kernel.org/stable/c/2f2190ce4ca972051cac6a8d7937448f8cb9673c Patch
- https://git.kernel.org/stable/c/39ed887b1dd2d6b720f87e86692ac3006cc111c8 Patch
- https://git.kernel.org/stable/c/4e38eaaabfb7fffbb371a51150203e19eee5d70e Patch
- https://git.kernel.org/stable/c/6672e6c00810056acaac019fe26cdc26fee8a66c Patch
- https://git.kernel.org/stable/c/a0ec22fa20b252edbe070a9de8501eef63c17ef5 Patch
- https://git.kernel.org/stable/c/ac9fe7dd8e730a103ae4481147395cc73492d786 Patch
- https://git.kernel.org/stable/c/e5bee633cc276410337d54b99f77fbc1ad8801e5 Patch
- https://syst3mfailure.io/rbtree-family-drama/ Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Third Party Advisory
- https://syst3mfailure.io/rbtree-family-drama/ Third Party Advisory
时间线
- nvd_ingest NVD