Skip to main content
EPSS 0.2%top 88%

Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As… (CVE-2025-37914)

0
High
Published: 05/20/2025 (05/20/2025, 16:15:00 UTC)
Source: GCVE Database
Product: linux-hwe-edge

Description

In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of ets, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption. In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before doing the addition to cater for the reentrant case. [1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/

CVSS v3.1

Score 7.8high

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Affected versions
Red HatRed Hat Enterprise LinuxRed Hat Enterprise Linux AppStream (v. 10)Red Hat Enterprise Linux BaseOS (v. 10)Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)<5.15.0-1088.95~20.04.1<5.15.0-1094.103~20.04.1<5.15.0-1087.96~20.04.2<5.15.0-144.157~20.04.1<5.15.0-1080.83~20.04.1

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 06/25/2026, 04:46:03 UTC

Technical Analysis

The advisory covers three kernel vulnerabilities: CVE-2025-37914 fixes a double list add in the net_sched subsystem when netem is used as a child qdisc; CVE-2025-38200 addresses an invalid MMIO write access in the i40e network driver during hardware clearing; CVE-2025-38417 resolves a memory leak in the ice network driver's eswitch code during reset. These issues impact the Linux kernel core components in Red Hat Enterprise Linux 10 and related products across multiple CPU architectures. Red Hat has released updated kernel packages that include fixes for these vulnerabilities. The update requires a system reboot to take effect. The advisory is classified as important by Red Hat Product Security.

Potential Impact

The vulnerabilities affect the Linux kernel's network scheduling and network driver components, potentially leading to system instability or resource leaks. The double list add could cause kernel data structure corruption, the invalid MMIO write could lead to undefined behavior or crashes, and the memory leak could degrade system performance over time. No known exploits in the wild have been reported. The impact is rated as important by Red Hat, indicating a significant security concern that warrants prompt patching.

Mitigation Recommendations

Red Hat has released official kernel updates that address these vulnerabilities. Users should apply the updated kernel packages for Red Hat Enterprise Linux 10 and related products as provided in advisory RHSA-2025:14510. A system reboot is required for the update to take effect. No additional mitigations are specified beyond applying the official patches and rebooting.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2025:14510
Cve Count
3
Additional Cves
["CVE-2025-38200","CVE-2025-38417"]

Threat ID: 6a3caf124853345fc153d7b7

Added to database: 06/25/2026, 04:31:14 UTC

Last enriched: 06/25/2026, 04:46:03 UTC

Last updated: 09/10/2026, 19:24:56 UTC

Views: 90

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses