CVE-2026-52984
Description
In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets The queue limit check in netem_enqueue() uses q->t_len which only counts packets in the internal tfifo. Packets placed in sch->q by the reorder path (__qdisc_enqueue_head) are not counted, allowing the total queue occupancy to exceed sch->limit under reordering. Include sch->q.qlen in the limit check.
How to fix
- linux linux_kernel5.5, 5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, 7.0.10 or later
- git.kernel.org/stable/c/0f875d52db4c921da610e481b72f03cc82fdcb72
- git.kernel.org/stable/c/39a66e83ea41fe845631eeb8d326953de27d13f9
- git.kernel.org/stable/c/4185701fcce6b426b6c3630b25330dddd9c47b0d
- git.kernel.org/stable/c/54b5dbacd00dedffd5e2eed76de1c3839996b5e6
- git.kernel.org/stable/c/74fcd8e127200a50ee22ba2b45c164722bdb9177
- git.kernel.org/stable/c/8450462eaf91d5d2a9e863507b16d18e814baef3
- git.kernel.org/stable/c/936a7dd87251f6f3e88983350833edf60fe6a80b
- git.kernel.org/stable/c/ef9a41b3870fb90577da5b2de5bd140022d4021e
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.4.288 ≤ v < 5.5, 5.10.232 ≤ v < 5.10.258, 5.15.175 ≤ v < 5.15.209, 6.1.121 ≤ v < 6.1.175, 6.6.67 ≤ v < 6.6.141, 6.12.6 ≤ v < 6.12.91, 6.13.1 ≤ v < 6.18.33, 6.19 ≤ v < 7.0.10, 6.13, 7.1 | 5.5, 5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, 7.0.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.