CVE-2025-21700 net: sched: Disallow replacing of child qdisc from one parent to another

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Addresses Multiple CVEs in Networking Components Microsoft has published information on two CVEs affecting networking components. CVE-2024-56770, published on January 8, 2025, addresses backlog updates from child qdisc in netem. CVE-2025-37914, published on May 20, 2025, fixes a double list addition issue in class with netem as a child qdisc. 5 sources 41