PT-2025-24197 · Linux+6 · Linux Kernel+6
Published
2025-05-22
·
Updated
2026-05-26
·
CVE-2025-38000
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A bug in the Linux kernel's HFSC qdisc has been identified, which can lead to inconsistent queue accounting. This occurs when the
hfsc enqueue() function calls the child qdisc's peek() operation before updating the queue length and backlog. If the child qdisc uses qdisc peek dequeued(), this may trigger an immediate dequeue and potential packet drop, resulting in inconsistent queue accounting. This can cause an empty HFSC class to remain in the active list, leading to further consequences such as use-after-free.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Centos
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu