CVE-2026-52984

MediumCVSS 5.5/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net/sched: netem: fix queue limit check to include reordered packets

The queue limit check in netem_enqueue() uses q->t_len which only counts packets in the internal tfifo. Packets placed in sch->q by the reorder path (__qdisc_enqueue_head) are not counted, allowing the total queue occupancy to exceed sch->limit under reordering.

Include sch->q.qlen in the limit check.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 216509dda290f6db92c816dd54b83c1df9da9e76, < 0f875d52db4c921da610e481b72f03cc82fdcb72; >= c2047b0e216c8edce227d7c42f99ac2877dad0e4, < ef9a41b3870fb90577da5b2de5bd140022d4021e; >= 10df49cfca73dfbbdb6c4150d859f7e8926ae427, < 74fcd8e127200a50ee22ba2b45c164722bdb9177; >= 3824c5fad18eeb7abe0c4fc966f29959552dca3e, < 39a66e83ea41fe845631eeb8d326953de27d13f9; >= 356078a5c55ec8d2061fcc009fb8599f5b0527f9, < 54b5dbacd00dedffd5e2eed76de1c3839996b5e6; >= f8d4bc455047cf3903cd6f85f49978987dbb3027, < 8450462eaf91d5d2a9e863507b16d18e814baef3; >= f8d4bc455047cf3903cd6f85f49978987dbb3027, < 936a7dd87251f6f3e88983350833edf60fe6a80b; >= f8d4bc455047cf3903cd6f85f49978987dbb3027, < 4185701fcce6b426b6c3630b25330dddd9c47b0d; 83c6ab12f08dcc09d4c5ac86fdb89736b28f1d31; >= 5.10.232, < 5.10.258; >= 5.15.175, < 5.15.209; >= 6.1.121, < 6.1.175; >= 6.6.67, < 6.6.141; >= 6.12.6, < 6.12.91; >= 5.4.288, < 5.5
LinuxLinux6.13

References

Timeline

Published
Jun 24, 2026
Last modified
Nov 6, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-529855.5In the Linux kernel, the following vulnerability has been resolved: netdevsim: zero initialize struct iphdr in dummy sk_buff Syzbot reportCVE-2026-529869.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: don't use simple_strtoul Replace unsafe pCVE-2026-529877.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid double drm_exec_fini() in userq validate When new_adCVE-2026-529887.1In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phCVE-2026-529899.8In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers CVE-2026-52995.5ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceCVE-2026-529905.5In the Linux kernel, the following vulnerability has been resolved: fsnotify: fix inode reference leak in fsnotify_recalc_mask() fsnotify_CVE-2026-529917.8In the Linux kernel, the following vulnerability has been resolved: sched/psi: fix race between file release and pressure write A potentiaCVE-2026-529927.8In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfs_validate_bblk() Reject ADFS disc recoCVE-2026-529939.8In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potCVE-2026-529945.5In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting virtio_transporCVE-2026-529955.5In the Linux kernel, the following vulnerability has been resolved: net/rds: zero per-item info buffer before handing it to visitors rds_f
CVE-2026-52984: Medium severity, CVSS 5.5 | Vulnix