Linux · Linux Kernel · CVE-2025-38684
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 6.12.0-116.el10.x86 64
**Description**
A flaw was discovered in the Linux kernel's `sch ets` module related to the handling of queue bands during the purging of unused classes. Specifically, the code used an outdated value for `nbands` when cleaning up DWRR queues, leading to a potential NULL pointer dereference. This issue was identified through a test case and triggered by recent changes to the qdisc length accounting fixes.
**Recommendations**
Update the Linux kernel to version 6.12.0-116.el10.x86 64 or later to address this issue.