The vulnerability of the ets_qdisc_change() function in the net/sched/sch_ets.c module of the network/sched/sch_ets.c subsystem of the Linux operating system’s networking subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

🗓️ 08 Jul 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

ets_qdisc_change() vulnerability in net/sched/sch_ets.c enables freed memory reuse risking confidentiality, integrity, and accessibility.

Reporter	Title	Published	Views	Family All 287
ATTACKERKB	CVE-2025-71066	13 Jan 202615:31	–	attackerkb
AstraLinux	Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1	20 May 202605:53	–	astralinux
Circl	CVE-2025-71066	13 Jan 202618:01	–	circl
CNNVD	Linux kernel 安全漏洞	13 Jan 202600:00	–	cnnvd
CVE	CVE-2025-71066	13 Jan 202615:31	–	cve
Cvelist	CVE-2025-71066 net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change	13 Jan 202615:31	–	cvelist
Debian	[SECURITY] [DLA 4475-1] linux security update	11 Feb 202612:47	–	debian
Debian	[SECURITY] [DLA 4476-1] linux-6.1 security update	11 Feb 202612:48	–	debian
Debian	[SECURITY] [DSA 6126-1] linux security update	9 Feb 202618:21	–	debian
Debian	[SECURITY] [DSA 6127-1] linux security update	9 Feb 202619:19	–	debian

Vulners

Node

novell suse_linux_enterprise_microMatch5.2linux

OR

novell suse_linux_microMatch6.0

OR

novell suse_linux_microMatch6.1

OR

novell suse_linux_enterprise_server_for_sap_applicationsMatch16.0

OR

novell suse_linux_enterprise_serverMatch16.0

OR

novell opensuse_leapMatch16.0

OR

novell suse_linux_microMatch6.2

Source	Link
cve	www.cve.org/CVERecord
git	www.git.kernel.org/stable/c/a75d617a4ef08682f5cfaadc01d5141c87e019c9
git	www.git.kernel.org/stable/c/9987cda315c08f63a02423fa2f9a1f6602c861a0
git	www.git.kernel.org/stable/c/06bfb66a7c8b45e3fed01351a4b087410ae5ef39
git	www.git.kernel.org/stable/c/45466141da3c98a0c5fa88be0bc14b4b6a4bd75c
git	www.git.kernel.org/linus/ce052b9402e461a9aded599f5b47e76bc727f7de
suse	www.suse.com/security/cve/CVE-2025-71066.html
ubuntu	www.ubuntu.com/security/CVE-2025-71066
security-tracker	www.security-tracker.debian.org/tracker/CVE-2025-71066
web	www.web.nvd.nist.gov/view/vuln/detail

08 Jul 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 26

CVSS 37

EPSS0.00151

freed memory reuse memory reuse vulnerability kernel networking vulnerability net scheduling module traffic discipline change