VDB

CVE-2026-52984

CVE-2026-52984 PUBLISHED

Reported by Linux · Published June 24, 2026

In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets The queue limit check in netem_enqueue() uses q->t_len which only counts packets in the internal tfifo. Packets placed in sch->q by the reorder path (__qdisc_enqueue_head) are not counted, allowing the total queue occupancy to exceed sch->limit under reordering. Include sch->q.qlen in the limit check.

EPSS 0.18% · 8.2th percentile

Risk Scores

EPSS Score
0.18%
8.2th percentile

Affected Products

VendorProductVersions
LinuxLinux216509dda290f6db92c816dd54b83c1df9da9e76, c2047b0e216c8edce227d7c42f99ac2877dad0e4, 10df49cfca73dfbbdb6c4150d859f7e8926ae427
LinuxLinux6.13, 0, 5.10.258
linuxlinux_kernel5.10.232, 5.15.175, 6.1.121
LinuxLinux216509dda290f6db92c816dd54b83c1df9da9e76, c2047b0e216c8edce227d7c42f99ac2877dad0e4, 10df49cfca73dfbbdb6c4150d859f7e8926ae427

Timeline

  • Jun 24, 2026 CVE Published
  • Jun 25, 2026 Coalition ESS Score
  • Jun 26, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›