PT-2026-2547 · Linux+2 · Linux Kernel+2

CVE-2025-68815

·

Published

2025-12-10

·

Updated

2026-08-30

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc7-00105-g7e9f13163c13-dirty
Description The Linux kernel contains an issue within the ets scheduling class. When a user changes a drr class to a strict one, the code fails to check if that class is present in the active list and remove it. If a strict class, previously in the active list, is changed back to drr, it can be added to the active list twice. This can lead to a system crash, as demonstrated by a 'list add double add' error message. The issue is triggered by specific tc commands followed by ping commands.
Recommendations Update to Linux kernel version 6.18.0-rc7-00105-g7e9f13163c13-dirty or a later version that includes the fix.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-74426
BDU:2026-09423
CVE-2025-68815
ECHO-A6A1-ACF3-985D
MGASA-2026-0017
MGASA-2026-0018
OPENSUSE-SU-2026:20287-1
SUSE-SU-2026:0447-1
SUSE-SU-2026:0472-1
SUSE-SU-2026:0587-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20555-1
SUSE-SU-2026:20570-1
SUSE-SU-2026:20599-1
SUSE-SU-2026:20615-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
USN-8096-1
USN-8096-2
USN-8096-3
USN-8096-4
USN-8096-5
USN-8116-1
USN-8141-1
USN-8163-1
USN-8163-2
USN-8177-1
USN-8177-2
USN-8179-1
USN-8179-2
USN-8179-3
USN-8179-4
USN-8183-1
USN-8183-2
USN-8184-1
USN-8185-1
USN-8185-2
USN-8203-1
USN-8204-1
USN-8243-1
USN-8245-1
USN-8257-1
USN-8258-1
USN-8260-1
USN-8261-1
USN-8265-1
USN-8440-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu