CVE-2025-37823

Updated: 2025-11-19 05:13:30.676526

Description:

In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.8 HIGH Released CLSA-2025:1757699471 2025-09-12 19:27:45
CentOS 6 ELS kernel 2.6.32 7.8 HIGH In Testing 2025-12-11 05:57:55
CentOS 7 ELS kernel 3.10.0 7.8 HIGH Released CLSA-2025:1757967705 2025-09-30 05:42:12
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH In Progress 2025-11-20 20:26:34
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Needs Triage 2025-11-19 09:39:00
CentOS Stream 8 ELS kernel 4.18.0 7.8 HIGH In Progress 2025-12-01 16:35:12
CloudLinux 7 ELS kernel 3.10.0 7.8 HIGH Ignored 2025-12-27 05:17:19 CloudLinux 6 and 7 support is limited and provided on demand. We strongly recommend upgrading to Clo...
Oracle Linux 6 ELS kernel 2.6.32 7.8 HIGH Needs Triage 2025-11-19 09:39:04
Oracle Linux 7 ELS kernel 3.10.0 7.8 HIGH Released CLSA-2025:1757698145 2025-09-12 19:20:46
Oracle Linux 7 ELS kernel-uek 5.4.17 7.8 HIGH Released CLSA-2025:1757963029 2025-09-16 11:20:44
Total: 16