SECUFOCUSNOW
Home›CVE index›CVE-2025-68815
Review reviewHigh

CVE-2025-68815

Linux

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Remove drr class from the active list if it changes to strict Whenever a user issues an ets qdisc change command, transforming a drr class into a strict one, the ets code isn't checking whether that class was in the active list and removing it. This means that, if a user changes a strict class (which was in the active list) back to a drr one, that class will be added twice to the active list [1]. Doing so with the following commands: tc qdisc add dev lo root handle 1: ets bands 2 strict 1 tc qdisc add dev lo...

CVSS
7.8
EPSS
0.13%
2.97% percentile
CISA KEV
Not listed
Published
2026.01.14
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.13%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Remove drr class from the active list if it changes to strict Whenever a user issues an ets qdisc change command, transforming a drr class into a strict one, the ets code isn't checking whether that class was in the active list and removing it. This means that, if a user changes a strict class (which was in the active list) back to a drr one, that class will be added twice to the active list [1]. Doing so with the following commands: tc qdisc add dev lo root handle 1: ets bands 2 strict 1 tc qdisc add dev lo...

Affected product and versions

Product
Linux
Affected versions
>= f517335a61ff8037b18ba1b0a002c1f82926a934 < 58fdce6bc005e964f1dbc3ca716f5fe0f68839a2, >= cd9b50adc6bb9ad3f7d244590a389522215865c4 < 02783a37cb1c0a2bd9fcba4ff1b81e6e209c7d87, >= cd9b50adc6bb9ad3f7d244590a389522215865c4 < 8067db5c95aab9461d23117679338cd8869831fa, >= cd9b50adc6bb9ad3f7d244590a389522215865c4 < 2f125ebe47d6369e562f3cbd9b6227cff51eaf34, >= cd9b50adc6bb9ad3f7d244590a389522215865c4 < cca2ed931b734fe48139bc6f020e47367346630f, >= cd9b50adc6bb9ad3f7d244590a389522215865c4 < 43d9a530c8c094d137159784e7c951c65f11ec6c, >= cd9b50adc6bb9ad3f7d244590a389522215865c4 < b1e125ae425aba9b45252e933ca8df52a843ec70, >= d05330672afe2e142ba97e63bd7c1faef76781bb, >= 5.10.62 < 5.10.248, >= 5.13.14 < 5.14, >= 5.14
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available