exploitDog

CVE-2026-52984

Опубликовано: 24 июн. 2026

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

net/sched: netem: fix queue limit check to include reordered packets

The queue limit check in netem_enqueue() uses q->t_len which only counts packets in the internal tfifo. Packets placed in sch->q by the reorder path (__qdisc_enqueue_head) are not counted, allowing the total queue occupancy to exceed sch->limit under reordering.

Include sch->q.qlen in the limit check.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.4.288 (включая) до 5.5 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.10.232 (включая) до 5.10.258 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.15.175 (включая) до 5.15.209 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.1.121 (включая) до 6.1.175 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.6.67 (включая) до 6.6.141 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.12.6 (включая) до 6.12.91 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13.1 (включая) до 6.18.33 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.19 (включая) до 7.0.10 (исключая)

cpe:2.3:o:linux:linux_kernel:6.13:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*

EPSS

Процентиль: 3%

0.00128

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2026-52984

CVSS3: 5.5

ubuntu

около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets The queue limit check in netem_enqueue() uses q->t_len which only counts packets in the internal tfifo. Packets placed in sch->q by the reorder path (__qdisc_enqueue_head) are not counted, allowing the total queue occupancy to exceed sch->limit under reordering. Include sch->q.qlen in the limit check.

CVE-2026-52984

CVSS3: 5.5

redhat

около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets The queue limit check in netem_enqueue() uses q->t_len which only counts packets in the internal tfifo. Packets placed in sch->q by the reorder path (__qdisc_enqueue_head) are not counted, allowing the total queue occupancy to exceed sch->limit under reordering. Include sch->q.qlen in the limit check.

CVE-2026-52984

CVSS3: 5.5

msrc

25 дней назад

net/sched: netem: fix queue limit check to include reordered packets

CVE-2026-52984

CVSS3: 5.5

debian

около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: n ...

GHSA-29w2-r4qv-vcrw

CVSS3: 5.5

github

около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets The queue limit check in netem_enqueue() uses q->t_len which only counts packets in the internal tfifo. Packets placed in sch->q by the reorder path (__qdisc_enqueue_head) are not counted, allowing the total queue occupancy to exceed sch->limit under reordering. Include sch->q.qlen in the limit check.

EPSS

Процентиль: 3%

0.00128

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo