In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: fix a potential crash on gso_skb handling SFQ has an assumption of always being able to queue at least one pa…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: fix a potential crash on gso_skb handling SFQ has an assumption of always being able to queue at least one packet. However, after the blamed commit, sch->q.len can be inflated by packets in sch->gso_skb, and an enqueue() on an empty SFQ qdisc can be followed by an immediate drop. Fix sfq_drop() to properly clear q->tail in this situation. ip netns add lb ip link add dev to-lb type veth peer name in-lb …
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/5814a7fc3abb41f63f2d44c9d3ff9d4e62965b72 Patch
- https://git.kernel.org/stable/c/82448d4dcd8406dec688632a405fdcf7f170ec69 Patch
- https://git.kernel.org/stable/c/82ffbe7776d0ac084031f114167712269bf3d832 Patch
- https://git.kernel.org/stable/c/9c19498bdd7cb9d854bd3c54260f71cf7408495e Patch
- https://git.kernel.org/stable/c/b44f791f27b14c9eb6b907fbe51f2ba8bec32085 Patch
- https://git.kernel.org/stable/c/b4e9bab6011b9559b7c157b16b91ae46d4d8c533 Patch
- https://git.kernel.org/stable/c/c337efb20d6d9f9bbb4746f6b119917af5c886dc Patch
- https://git.kernel.org/stable/c/d1bc80da75c789f2f6830df89d91fb2f7a509943 Patch
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Third Party Advisory
Timeline
- nvd_ingest NVD