https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T14:42:26.907754+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-38083 CVE-2025-38083 — net_sched: prio: fix a race in prio_tune() 2026-10-04T14:42:27.101061+00:00

Affected: Linux, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

In the Linux kernel, the following vulnerability has been resolved:

net_sched: prio: fix a race in prio_tune()

Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time.

The race is as follows:

CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()

This can be abused to underflow a parent's qlen.

Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.

 https://vulnerability.circl.lu/vuln/usn-7681-1 USN-7681-1 — linux, linux-aws, linux-aws-6.14, linux-gcp, linux-gcp-6.14, linux-hwe-6.14, linux-oem-6.14, linux-raspi, linux-realtim… 2026-10-04T14:42:27.101182+00:00

Affected: Ubuntu:24.04:LTS: linux-aws-6.14, Ubuntu:24.04:LTS: linux-gcp-6.14, Ubuntu:24.04:LTS: linux-hwe-6.14, Ubuntu:24.04:LTS: linux-oem-6.14

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network traffic control; (CVE-2025-38083)