- Vulnerability/
- CVE-2025-37823
CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
First published: Thu May 08 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/68f256305ceb426d545a0dc31f83c2ab1d211a1e
- https://git.kernel.org/stable/c/2f46d14919c39528c6e540ebc43f90055993eedc
- https://git.kernel.org/stable/c/da7936518996d290e2fcfcaf6cd7e15bfd87804a
- https://git.kernel.org/stable/c/11bccb054c1462fb069219f8e98e97a5a730758e
- https://git.kernel.org/stable/c/76c4c22c2437d3d3880efc0f62eca06ef078d290
- https://git.kernel.org/stable/c/c6f035044104c6ff656f4565cd22938dc892528c
- https://git.kernel.org/stable/c/c6936266f8bf98a53f28ef9a820e6a501e946d09
- https://git.kernel.org/stable/c/6ccbda44e2cc3d26fd22af54c650d6d5d801addf
Frequently Asked Questions
What is the severity of CVE-2025-37823?
CVE-2025-37823 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-37823?
To fix CVE-2025-37823, you should update to the latest version of the Linux kernel where the vulnerability has been patched.
What systems are affected by CVE-2025-37823?
CVE-2025-37823 affects systems running vulnerable versions of the Linux kernel.
What does CVE-2025-37823 vulnerability involve?
CVE-2025-37823 involves a use-after-free vulnerability in the hfsc_dequeue() function in the Linux kernel.
Is there a workaround for CVE-2025-37823?
Currently, there are no known workarounds for CVE-2025-37823, and patching is recommended.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/source
- agent/tags
- agent/event
- vendor/linux
- canonical/linux kernel