https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:42:14 +0000 https://vulnerability.circl.lu/vuln/cve-2025-38083 <p><strong>Affected:</strong> Linux, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net_sched: prio: fix a race in prio_tune()</p> <p>Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time.</p> <p>The race is as follows:</p> <p>CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()</p> <p>This can be abused to underflow a parent&#39;s qlen.</p> <p>Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.</p> <p><strong>Affected:</strong> Linux, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net_sched: prio: fix a race in prio_tune()</p> <p>Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time.</p> <p>The race is as follows:</p> <p>CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()</p> <p>This can be abused to underflow a parent&#39;s qlen.</p> <p>Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.</p> https://vulnerability.circl.lu/vuln/cve-2025-38083 https://vulnerability.circl.lu/vuln/usn-7681-1 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: linux-aws-6.14, Ubuntu:24.04:LTS: linux-gcp-6.14, Ubuntu:24.04:LTS: linux-hwe-6.14, Ubuntu:24.04:LTS: linux-oem-6.14</p> <p>Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network traffic control; (CVE-2025-38083)</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: linux-aws-6.14, Ubuntu:24.04:LTS: linux-gcp-6.14, Ubuntu:24.04:LTS: linux-hwe-6.14, Ubuntu:24.04:LTS: linux-oem-6.14</p> <p>Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network traffic control; (CVE-2025-38083)</p> https://vulnerability.circl.lu/vuln/usn-7681-1