CVE-2026-52984

net/sched: netem: fix queue limit check to include reordered packets

State: Published
Severity: Not scored
Published: Jun 24, 2026
Updated: Jun 24, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net/sched: netem: fix queue limit check to include reordered packets

The queue limit check in netem_enqueue() uses q->t_len which only counts packets in the internal tfifo. Packets placed in sch->q by the reorder path (__qdisc_enqueue_head) are not counted, allowing the total queue occupancy to exceed sch->limit under reordering.

Include sch->q.qlen in the limit check.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	216509dda290f6db92c816dd54b83c1df9da9e76 to before 0f875d52db4c921da610e481b72f03cc82fdcb72Affected c2047b0e216c8edce227d7c42f99ac2877dad0e4 to before ef9a41b3870fb90577da5b2de5bd140022d4021eAffected 10df49cfca73dfbbdb6c4150d859f7e8926ae427 to before 74fcd8e127200a50ee22ba2b45c164722bdb9177Affected 3824c5fad18eeb7abe0c4fc966f29959552dca3e to before 39a66e83ea41fe845631eeb8d326953de27d13f9Affected 356078a5c55ec8d2061fcc009fb8599f5b0527f9 to before 54b5dbacd00dedffd5e2eed76de1c3839996b5e6Affected f8d4bc455047cf3903cd6f85f49978987dbb3027 to before 8450462eaf91d5d2a9e863507b16d18e814baef3Affected f8d4bc455047cf3903cd6f85f49978987dbb3027 to before 936a7dd87251f6f3e88983350833edf60fe6a80bAffected f8d4bc455047cf3903cd6f85f49978987dbb3027 to before 4185701fcce6b426b6c3630b25330dddd9c47b0dAffected 83c6ab12f08dcc09d4c5ac86fdb89736b28f1d31Affected 5.10.232 to before 5.10.258Affected 5.15.175 to before 5.15.209Affected 6.1.121 to before 6.1.175Affected 6.6.67 to before 6.6.141Affected 6.12.6 to before 6.12.91Affected 5.4.288 to before 5.5Affected
LinuxLinux	6.13Affected before 6.13Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.141 through 6.6.Not affected 6.12.91 through 6.12.Not affected 6.18.33 through 6.18.Not affected 7.0.10 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

216509dda290f6db92c816dd54b83c1df9da9e76 to before 0f875d52db4c921da610e481b72f03cc82fdcb72Affected
c2047b0e216c8edce227d7c42f99ac2877dad0e4 to before ef9a41b3870fb90577da5b2de5bd140022d4021eAffected
10df49cfca73dfbbdb6c4150d859f7e8926ae427 to before 74fcd8e127200a50ee22ba2b45c164722bdb9177Affected
3824c5fad18eeb7abe0c4fc966f29959552dca3e to before 39a66e83ea41fe845631eeb8d326953de27d13f9Affected
356078a5c55ec8d2061fcc009fb8599f5b0527f9 to before 54b5dbacd00dedffd5e2eed76de1c3839996b5e6Affected
f8d4bc455047cf3903cd6f85f49978987dbb3027 to before 8450462eaf91d5d2a9e863507b16d18e814baef3Affected
f8d4bc455047cf3903cd6f85f49978987dbb3027 to before 936a7dd87251f6f3e88983350833edf60fe6a80bAffected
f8d4bc455047cf3903cd6f85f49978987dbb3027 to before 4185701fcce6b426b6c3630b25330dddd9c47b0dAffected
83c6ab12f08dcc09d4c5ac86fdb89736b28f1d31Affected
5.10.232 to before 5.10.258Affected
5.15.175 to before 5.15.209Affected
6.1.121 to before 6.1.175Affected
6.6.67 to before 6.6.141Affected
6.12.6 to before 6.12.91Affected
5.4.288 to before 5.5Affected

LinuxLinux

6.13Affected
before 6.13Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.141 through 6.6.*Not affected
6.12.91 through 6.12.*Not affected
6.18.33 through 6.18.*Not affected
7.0.10 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.