Threats tagged 'ghsa-hvr4-ppmm-c7fp'

CVE-2025-37797 is a Use-After-Free (UAF) vulnerability in the Linux kernel's HFSC queuing discipline class handling. The flaw arises from a time-of-check/time-of-use issue in the hfsc_change_class() function when interacting with certain child qdiscs like netem or codel. This can lead to the HFSC scheduler operating on freed memory, causing potential system instability or escalation of privileges. The vulnerability has a high severity score of 7.8 CVSS v3.1.