Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing… (CVE-2025-38568)
In the Linux kernel, the following vulnerability has been resolved: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing TCA_MQPRIO_TC_ENTRY_INDEX is validated using NLA_POLICY_MAX(NLA_U32, TC_QOPT_MAX_QUEUE), which allows the value TC_QOPT_MAX_QUEUE (16). This leads to a 4-byte out-of-bounds stack write in the fp[] array, which only has room for 16 elements (0–15). Fix this by changing the policy to allow only up to TC_QOPT_MAX_QUEUE - 1.
AI Analysis
Technical Summary
The Red Hat security advisory RHSA-2026:1617 fixes three vulnerabilities in the Linux kernel for Red Hat Enterprise Linux 9: CVE-2025-38568 addresses a stack out-of-bounds write in the net/sched mqprio module during traffic control entry parsing; CVE-2025-40154 corrects an invalid quirk input mapping in the Intel ASoC bytcr_rt5640 driver; CVE-2025-40251 resolves an issue where the parent pointer was not unset in devlink rate node destruction. These vulnerabilities have been rated as moderate severity by Red Hat Product Security. Updated kernel packages are available and must be installed with a system reboot to take effect.
Potential Impact
The vulnerabilities affect the Linux kernel, the core component of the operating system, potentially leading to memory corruption or improper device driver behavior. While no known exploits in the wild have been reported, successful exploitation could cause system instability or unintended behavior. The issues are rated moderate in severity by Red Hat, indicating a meaningful but not critical risk.
Mitigation Recommendations
Red Hat has released updated kernel packages for Red Hat Enterprise Linux 9 that address these vulnerabilities. Users should apply the available kernel updates as described in the Red Hat advisory RHSA-2026:1617 and reboot affected systems to ensure the fixes take effect. No additional mitigations are specified or required beyond applying the official update and rebooting.
Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing… (CVE-2025-38568)
Description
In the Linux kernel, the following vulnerability has been resolved: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing TCA_MQPRIO_TC_ENTRY_INDEX is validated using NLA_POLICY_MAX(NLA_U32, TC_QOPT_MAX_QUEUE), which allows the value TC_QOPT_MAX_QUEUE (16). This leads to a 4-byte out-of-bounds stack write in the fp[] array, which only has room for 16 elements (0–15). Fix this by changing the policy to allow only up to TC_QOPT_MAX_QUEUE - 1.
CVSS v3.1
Score 7.8high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Red Hat security advisory RHSA-2026:1617 fixes three vulnerabilities in the Linux kernel for Red Hat Enterprise Linux 9: CVE-2025-38568 addresses a stack out-of-bounds write in the net/sched mqprio module during traffic control entry parsing; CVE-2025-40154 corrects an invalid quirk input mapping in the Intel ASoC bytcr_rt5640 driver; CVE-2025-40251 resolves an issue where the parent pointer was not unset in devlink rate node destruction. These vulnerabilities have been rated as moderate severity by Red Hat Product Security. Updated kernel packages are available and must be installed with a system reboot to take effect.
Potential Impact
The vulnerabilities affect the Linux kernel, the core component of the operating system, potentially leading to memory corruption or improper device driver behavior. While no known exploits in the wild have been reported, successful exploitation could cause system instability or unintended behavior. The issues are rated moderate in severity by Red Hat, indicating a meaningful but not critical risk.
Mitigation Recommendations
Red Hat has released updated kernel packages for Red Hat Enterprise Linux 9 that address these vulnerabilities. Users should apply the available kernel updates as described in the Red Hat advisory RHSA-2026:1617 and reboot affected systems to ensure the fixes take effect. No additional mitigations are specified or required beyond applying the official update and rebooting.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:1617
- Cve Count
- 3
- Additional Cves
- ["CVE-2025-40154","CVE-2025-40251"]
Threat ID: 6a3da1c74853345fc18209e9
Added to database: 06/25/2026, 21:46:47 UTC
Last enriched: 06/25/2026, 21:58:55 UTC
Last updated: 09/10/2026, 19:36:50 UTC
Views: 81
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.