PT-2025-31074 · Linux+9 · Linux Kernel+9

Published 2025-07-10 · Updated 2026-04-20 · CVE-2025-38477

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition can occur when agg is modified while other threads access it concurrently, potentially leading to a NULL dereference or a use-after-free. The issue arises from concurrent access to agg during operations like qfq enqueue, qfq dump class, and qfq delete class.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Race Condition

NULL Pointer Dereference

Weakness Enumeration

CWE-416

CWE-362

CWE-476

Related Identifiers

ALSA-2025:15008

AZL-65907

AZL-73046

BDU:2025-09177

CESA-2025_15008

CVE-2025-38477

DLA-4327-1

DLA-4328-1

DSA-5973-1

DSA-5975-1

ECHO-2D92-15C5-8944

INFSA-2025_15008

MGASA-2025-0218

MGASA-2025-0219

OESA-2025-2057

OPENSUSE-SU-2025:20081-1

RHSA-2025:17109

RHSA-2025:17161

RHSA-2025_15008

SUSE-SU-2025:02846-1

SUSE-SU-2025:02849-1

SUSE-SU-2025:02851-1

SUSE-SU-2025:02852-1

SUSE-SU-2025:02853-1

SUSE-SU-2025:02923-1

SUSE-SU-2025:02969-1

SUSE-SU-2025:02996-1

SUSE-SU-2025:02997-1

SUSE-SU-2025:03011-1

SUSE-SU-2025:03023-1

SUSE-SU-2025:03310-1

SUSE-SU-2025:03344-1

SUSE-SU-2025:03384-1

SUSE-SU-2025:03465-1

SUSE-SU-2025:03468-1

SUSE-SU-2025:03469-1

SUSE-SU-2025:03470-1

SUSE-SU-2025:03472-1

SUSE-SU-2025:03473-1

SUSE-SU-2025:03475-1

SUSE-SU-2025:03476-1

SUSE-SU-2025:03479-1

SUSE-SU-2025:03480-1

SUSE-SU-2025:03482-1

SUSE-SU-2025:03483-1

SUSE-SU-2025:03485-1

SUSE-SU-2025:03494-1

SUSE-SU-2025:03495-1

SUSE-SU-2025:03496-1

SUSE-SU-2025:03497-1

SUSE-SU-2025:03498-1

SUSE-SU-2025:03503-1

SUSE-SU-2025:03504-1

SUSE-SU-2025:03514-1

SUSE-SU-2025:03515-1

SUSE-SU-2025:03528-1

SUSE-SU-2025:03529-1

SUSE-SU-2025:03538-1

SUSE-SU-2025:03539-1

SUSE-SU-2025:03541-1

SUSE-SU-2025:03543-1

SUSE-SU-2025:03548-1

SUSE-SU-2025:03550-1

SUSE-SU-2025:03551-1

SUSE-SU-2025:03552-1

SUSE-SU-2025:03553-1

SUSE-SU-2025:03554-1

SUSE-SU-2025:03555-1

SUSE-SU-2025:03557-1

SUSE-SU-2025:03559-1

SUSE-SU-2025:03561-1

SUSE-SU-2025:03562-1

SUSE-SU-2025:03563-1

SUSE-SU-2025:03566-1

SUSE-SU-2025:03567-1

SUSE-SU-2025:03568-1

SUSE-SU-2025:03569-1

SUSE-SU-2025:03571-1

SUSE-SU-2025:03572-1

SUSE-SU-2025:03575-1

SUSE-SU-2025:03576-1

SUSE-SU-2025:03577-1

SUSE-SU-2025:03578-1

SUSE-SU-2025:03580-1

SUSE-SU-2025:03583-1

SUSE-SU-2025:20577-1

SUSE-SU-2025:20586-1

SUSE-SU-2025:20601-1

SUSE-SU-2025:20602-1

SUSE-SU-2025:20806-1

SUSE-SU-2025:20807-1

SUSE-SU-2025:20808-1

SUSE-SU-2025:20809-1

SUSE-SU-2025:20810-1

SUSE-SU-2025:20811-1

SUSE-SU-2025:20812-1

SUSE-SU-2025:20813-1

SUSE-SU-2025:20814-1

SUSE-SU-2025:20815-1

SUSE-SU-2025:20816-1

SUSE-SU-2025:20817-1

SUSE-SU-2025:20818-1

SUSE-SU-2025:20819-1

SUSE-SU-2025:20820-1

SUSE-SU-2025:20826-1

SUSE-SU-2025:20827-1

SUSE-SU-2025:20828-1

SUSE-SU-2025:20829-1

SUSE-SU-2025:20830-1

SUSE-SU-2025:20831-1

SUSE-SU-2025:20832-1

SUSE-SU-2025:20833-1

SUSE-SU-2025:20834-1

SUSE-SU-2025:20835-1

SUSE-SU-2025:20836-1

SUSE-SU-2025:20837-1

SUSE-SU-2025:20838-1

SUSE-SU-2025:20839-1

SUSE-SU-2025:20840-1

SUSE-SU-2025:20841-1

SUSE-SU-2025:20842-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025:4123-1

SUSE-SU-2025_02846-1

SUSE-SU-2025_02849-1

SUSE-SU-2025_02853-1

SUSE-SU-2025_02969-1

SUSE-SU-2025_02996-1

SUSE-SU-2025_02997-1

SUSE-SU-2025_03011-1

SUSE-SU-2025_03023-1

SUSE-SU-2025_03310-1

SUSE-SU-2025_03344-1

USN-7791-1

USN-7791-2

USN-7791-3

USN-7791-4

USN-7792-1

USN-7792-2

USN-7792-3

USN-7793-1

USN-7793-2

USN-7793-3

USN-7793-4

USN-7793-5

USN-7795-1

USN-7795-2

USN-7795-3

USN-7795-4

USN-7795-5

USN-7796-1

USN-7796-2

USN-7796-3

USN-7796-4

USN-7798-1

USN-7799-1

USN-7800-1

USN-7801-1

USN-7801-2

USN-7801-3

USN-7808-1

USN-7808-2

USN-7809-1

USN-7810-1

USN-7810-2

USN-7810-3

USN-7811-1

USN-7819-1

USN-7819-2

USN-7820-1

USN-7821-1

USN-7854-1

USN-7875-1

USN-7933-1

Affected Products

Almalinux

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 2764

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38477.json · Exploit
• https://ubuntu.com/security/CVE-2025-21945 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03562-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7792-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52975 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39675 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-1202SE17 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7809-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02969-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39772 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39823 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-38477 · Vendor Advisory
• https://git.kernel.org/stable/c/c6df794000147a3a02f79984aada4ce83f8d0a1e · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03555-1 · Vendor Advisory