Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As… (CVE-2025-37914)
In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of ets, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption. In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before doing the addition to cater for the reentrant case. [1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
AI Analysis
Technical Summary
The advisory covers three kernel vulnerabilities: CVE-2025-37914 fixes a double list add in the net_sched subsystem when netem is used as a child qdisc; CVE-2025-38200 addresses an invalid MMIO write access in the i40e network driver during hardware clearing; CVE-2025-38417 resolves a memory leak in the ice network driver's eswitch code during reset. These issues impact the Linux kernel core components in Red Hat Enterprise Linux 10 and related products across multiple CPU architectures. Red Hat has released updated kernel packages that include fixes for these vulnerabilities. The update requires a system reboot to take effect. The advisory is classified as important by Red Hat Product Security.
Potential Impact
The vulnerabilities affect the Linux kernel's network scheduling and network driver components, potentially leading to system instability or resource leaks. The double list add could cause kernel data structure corruption, the invalid MMIO write could lead to undefined behavior or crashes, and the memory leak could degrade system performance over time. No known exploits in the wild have been reported. The impact is rated as important by Red Hat, indicating a significant security concern that warrants prompt patching.
Mitigation Recommendations
Red Hat has released official kernel updates that address these vulnerabilities. Users should apply the updated kernel packages for Red Hat Enterprise Linux 10 and related products as provided in advisory RHSA-2025:14510. A system reboot is required for the update to take effect. No additional mitigations are specified beyond applying the official patches and rebooting.
Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As… (CVE-2025-37914)
Description
In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of ets, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption. In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before doing the addition to cater for the reentrant case. [1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/
CVSS v3.1
Score 7.8high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The advisory covers three kernel vulnerabilities: CVE-2025-37914 fixes a double list add in the net_sched subsystem when netem is used as a child qdisc; CVE-2025-38200 addresses an invalid MMIO write access in the i40e network driver during hardware clearing; CVE-2025-38417 resolves a memory leak in the ice network driver's eswitch code during reset. These issues impact the Linux kernel core components in Red Hat Enterprise Linux 10 and related products across multiple CPU architectures. Red Hat has released updated kernel packages that include fixes for these vulnerabilities. The update requires a system reboot to take effect. The advisory is classified as important by Red Hat Product Security.
Potential Impact
The vulnerabilities affect the Linux kernel's network scheduling and network driver components, potentially leading to system instability or resource leaks. The double list add could cause kernel data structure corruption, the invalid MMIO write could lead to undefined behavior or crashes, and the memory leak could degrade system performance over time. No known exploits in the wild have been reported. The impact is rated as important by Red Hat, indicating a significant security concern that warrants prompt patching.
Mitigation Recommendations
Red Hat has released official kernel updates that address these vulnerabilities. Users should apply the updated kernel packages for Red Hat Enterprise Linux 10 and related products as provided in advisory RHSA-2025:14510. A system reboot is required for the update to take effect. No additional mitigations are specified beyond applying the official patches and rebooting.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:14510
- Cve Count
- 3
- Additional Cves
- ["CVE-2025-38200","CVE-2025-38417"]
Threat ID: 6a3caf124853345fc153d7b7
Added to database: 06/25/2026, 04:31:14 UTC
Last enriched: 06/25/2026, 04:46:03 UTC
Last updated: 09/10/2026, 19:24:56 UTC
Views: 90
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.