CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier
In the Linux kernel, the following vulnerability has been resolved:
net/sched: fix use-after-free in tapriodevnotifier
Since taprio’s tapriodevnotifier() isn’t protected by an RCU read-side critical section, a race with advancesched() can lead to a use-after-free.
Adding rcureadlock() inside tapriodevnotifier() prevents this.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38087?
CVE-2025-38087 has been classified with a high severity due to a use-after-free vulnerability in the Linux kernel.
How do I fix CVE-2025-38087?
To fix CVE-2025-38087, update the Linux kernel to the latest stable version that includes the relevant patches for this vulnerability.
What systems are affected by CVE-2025-38087?
CVE-2025-38087 affects various versions of the Linux kernel where the taprio_dev_notifier function is implemented.
What type of vulnerability is CVE-2025-38087?
CVE-2025-38087 is a use-after-free vulnerability that occurs due to improper handling of memory in the Linux kernel.
What is the potential impact of CVE-2025-38087?
The potential impact of CVE-2025-38087 includes system crashes and unauthorized access to system resources due to memory corruption.