CVE-2026-52984
Received Received - Intake
Linux Kernel Netem Queue Limit Bypass

Publication date: 2026-06-24

Last updated on: 2026-06-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets The queue limit check in netem_enqueue() uses q->t_len which only counts packets in the internal tfifo. Packets placed in sch->q by the reorder path (__qdisc_enqueue_head) are not counted, allowing the total queue occupancy to exceed sch->limit under reordering. Include sch->q.qlen in the limit check.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-24
Last Modified
2026-06-24
Generated
2026-06-25
AI Q&A
2026-06-24
EPSS Evaluated
N/A
NVD
CVE-2026-52984
EUVD
EUVD-2026-38852
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Linux kernel's network scheduler component called netem. Specifically, the issue is in the queue limit check within the netem_enqueue() function. The check only counts packets in an internal queue (tfifo) but does not account for packets that have been reordered and placed in another queue (sch->q) by the reorder path (__qdisc_enqueue_head). Because of this, the total number of packets in the queue can exceed the configured limit, potentially causing unexpected behavior.

Impact Analysis

The vulnerability allows the total queue occupancy to exceed its intended limit due to improper counting of reordered packets. This could lead to network performance degradation, such as increased latency or packet loss, because the queue may become overloaded beyond its configured capacity.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-52984. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart