CVE-2025-37823

net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too

State: Published
Severity: 7.8 High
Published: May 8, 2025
Updated: Oct 15, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too

Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 68f256305ceb426d545a0dc31f83c2ab1d211a1eAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2f46d14919c39528c6e540ebc43f90055993eedcAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before da7936518996d290e2fcfcaf6cd7e15bfd87804aAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 11bccb054c1462fb069219f8e98e97a5a730758eAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 76c4c22c2437d3d3880efc0f62eca06ef078d290Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c6f035044104c6ff656f4565cd22938dc892528cAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c6936266f8bf98a53f28ef9a820e6a501e946d09Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6ccbda44e2cc3d26fd22af54c650d6d5d801addfAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.4.293 through 5.4.Not affected 5.10.237 through 5.10.Not affected 5.15.181 through 5.15.Not affected 6.1.136 through 6.1.Not affected 6.6.89 through 6.6.Not affected 6.12.26 through 6.12.Not affected 6.14.5 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 68f256305ceb426d545a0dc31f83c2ab1d211a1eAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2f46d14919c39528c6e540ebc43f90055993eedcAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before da7936518996d290e2fcfcaf6cd7e15bfd87804aAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 11bccb054c1462fb069219f8e98e97a5a730758eAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 76c4c22c2437d3d3880efc0f62eca06ef078d290Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c6f035044104c6ff656f4565cd22938dc892528cAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c6936266f8bf98a53f28ef9a820e6a501e946d09Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6ccbda44e2cc3d26fd22af54c650d6d5d801addfAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.4.293 through 5.4.*Not affected
5.10.237 through 5.10.*Not affected
5.15.181 through 5.15.*Not affected
6.1.136 through 6.1.*Not affected
6.6.89 through 6.6.*Not affected
6.12.26 through 6.12.*Not affected
6.14.5 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.