Vulnerability Database

314,452

Total vulnerabilities in the database

CVE-2025-38477

In the Linux kernel, the following vulnerability has been resolved:

net/sched: sch_qfq: Fix race condition on qfq_aggregate

A race condition can occur when 'agg' is modified in qfq_change_agg (called during qfq_enqueue) while other threads access it concurrently. For example, qfq_dump_class may trigger a NULL dereference, and qfq_delete_class may cause a use-after-free.

This patch addresses the issue by:

  1. Moved qfq_destroy_class into the critical section.

  2. Added sch_tree_lock protection to qfq_dump_class and qfq_dump_class_stats.

  • Published: Jul 28, 2025
  • Updated: Dec 24, 2025
  • CVE: CVE-2025-38477
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.7
  • AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
linux / linux_kernel 3.8 5.4.297
linux / linux_kernel 5.5 5.10.241
linux / linux_kernel 5.11 5.15.190
linux / linux_kernel 5.16 6.1.147
linux / linux_kernel 6.2 6.6.100
linux / linux_kernel 6.7 6.12.40
linux / linux_kernel 6.13 6.15.8
linux / linux_kernel 6.16-rc1 6.16-rc1.x
linux / linux_kernel 6.16-rc2 6.16-rc2.x
linux / linux_kernel 6.16-rc3 6.16-rc3.x
linux / linux_kernel 6.16-rc4 6.16-rc4.x
linux / linux_kernel 6.16-rc5 6.16-rc5.x
linux / linux_kernel 6.16-rc6 6.16-rc6.x
debian / debian_linux 11.0 11.0.x