Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: sched: schcake: Fixed the logic for accounting bulk flows in order to ensure host fairness. In schcake, we keep track of the number of active bulk flows per host. This is done when running in the dst/src host fairness mode, which...

Linux Distros Unpatched Vulnerability : CVE-2025-68325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schcake: Fix incorrect qlen reduction in cakedrop In cakedrop, qdisctreereducebacklog is used to update the qlen and backlog of the qdisc hierarchy...

Important: kernel-livepatch-5.10.234-225.895

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: sched: schcake: add bounds checks to host bulk flow fairness counts CVE-2025-21647 In the Linux kernel, the following vulnerability has been resolved: pfifotailenqueue: Drop new packet when sch-limit == 0...

PT-2025-4328

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A logic error in the Linux kernel's sched: sch cake component led to an underflow of the per-host bulk flow counters, resulting in an out of bounds memory access. To fix this issue, bounds chec...

Linux sch_cake Heap Buffer Overflow Privilege Escalation

The vulnerability of the cakedestroy function in the schcake component of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

DEBIAN-CVE-2024-46828

In the Linux kernel, the following vulnerability has been resolved: sched: schcake: fix bulk flow accounting logic for host fairness In schcake, we keep track of the count of active bulk flows per host, when running in dst/src host fairness mode, which is used as the round-robin weight when...

PT-2024-32230

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the bulk flow accounting logic in the sch cake component of the Linux kernel. When the host fairness mode is disabled, a hash collision can cause a spurious...

UBUNTU-CVE-2021-47598

In the Linux kernel, the following vulnerability has been resolved: schcake: do not call cakedestroy from cakeinit qdiscs are not supposed to call their own destroy method from init, because core stack already does that. syzbot was able to trigger use after free: DEBUGLOCKSWARNONlock-magic != loc...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a security issue in schcake...

PT-2021-8211

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc4-syzkaller Description The vulnerability is related to the sch cake component in the Linux kernel. It is caused by the function cake destroy being called from cake init, which is not supposed to happen...