logo_clicknbuy.png

CVE-2025-38477 – Linux Kernel sch_qfq Race Condition Vulnerability

The following table lists the changes that have been made to the
CVE-2025-38477 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Jul. 28, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    net/sched: sch_qfq: Fix race condition on qfq_aggregate

    A race condition can occur when ‘agg’ is modified in qfq_change_agg
    (called during qfq_enqueue) while other threads access it
    concurrently. For example, qfq_dump_class may trigger a NULL
    dereference, and qfq_delete_class may cause a use-after-free.

    This patch addresses the issue by:

    1. Moved qfq_destroy_class into the critical section.

    2. Added sch_tree_lock protection to qfq_dump_class and
    qfq_dump_class_stats.
    Added Reference https://git.kernel.org/stable/c/466e10194ab81caa2ee6a332d33ba16bcceeeba6
    Added Reference https://git.kernel.org/stable/c/5e28d5a3f774f118896aec17a3a20a9c5c9dfc64
    Added Reference https://git.kernel.org/stable/c/a6d735100f602c830c16d69fb6d780eebd8c9ae1
    Added Reference https://git.kernel.org/stable/c/c000a3a330d97f6c073ace5aa5faf94b9adb4b79
    Added Reference https://git.kernel.org/stable/c/fbe48f06e64134dfeafa89ad23387f66ebca3527
Share the Post:

Related Posts