Описание
In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer.
Отчет
This vulnerability is assessed as having a Moderate impact because exploitation requires local access with network administrative privileges (CAP_NET_ADMIN) or access to unprivileged user namespaces. The Hierarchical Fair Service Curve (HFSC) packet scheduler is not enabled by default in standard Red Hat Enterprise Linux deployments. A local user with sufficient privileges to modify traffic control configurations could trigger this flaw to cause a kernel crash resulting in a denial of service or potentially read sensitive kernel memory.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Affected | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Affected | ||
| Red Hat Enterprise Linux 10 | kernel | Fixed | RHSA-2025:15005 | 02.09.2025 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | kernel-rt | Fixed | RHSA-2026:0754 | 19.01.2026 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | kernel | Fixed | RHSA-2026:0755 | 19.01.2026 |
| Red Hat Enterprise Linux 8 | kernel | Fixed | RHSA-2025:16919 | 29.09.2025 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:15011 | 02.09.2025 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:15011 | 02.09.2025 |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | kernel | Fixed | RHSA-2025:18054 | 15.10.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.1 High
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer.
In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer.
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
In the Linux kernel, the following vulnerability has been resolved: n ...
In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer.
EPSS
7.1 High
CVSS3