CVE-2025-38108

Updated: 2025-12-28 03:48:25.22974

Description:

In the Linux kernel, the following vulnerability has been resolved: net_sched: red: fix a race in __red_change() Gerrard Tai reported a race condition in RED, whenever SFQ perturb timer fires at the wrong time. The race is as follows: CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put() This can be abused to underflow a parent's qlen. Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.0

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.0 HIGH Needs Triage 2025-12-28 08:02:12
Oracle Linux 7 ELS kernel-uek 5.4.17 7.0 HIGH Released CLSA-2025:1757963029 2025-09-16 11:20:02
TuxCare 9.6 ESU kernel 5.14.0 7.0 HIGH Needs Triage 2025-12-28 08:02:11
Ubuntu 20.04 ELS linux 5.4.0 7.0 HIGH Needs Triage 2025-12-28 07:17:29