01 Record

CVE-2025-21647

sched: sch_cake: add bounds checks to host bulk flow fairness counts

HighPUBLISHEDCNA: Linux

CNA base score7.3 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

View raw JSON

02 Description

sched: sch_cake: add bounds checks to host bulk flow fairness counts

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.28% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 20.7% of scored records. A rank, not a probability.
NVD base score: 7.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-01-19 10:18Z1 YR AGO

Last updated

2026-08-05 11:53Z1 MO AGO

Reserved

2024-12-29

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.3)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

b54ec2a5408271c5692a9da5b985ac236037cb00ccadbbea8e5c454d5cebabde

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux4a4eeefa514db570be025ab46d779af180e2c9bb to < 44fe1efb4961c1a5ccab16bb579dfc6b308ad58b, 7725152b54d295b7da5e34c2f419539b30d017bd to < b1a1743aaa4906c41c426eda97e2e2586f79246d, cde71a5677971f4f1b69b25e854891dbe78066a4 to < bb0245fa72b783cb23a9949c5048781341e91423, 549e407569e08459d16122341d332cb508024094 to < a777e06dfc72bed73c05dcb437d7c27ad5f90f3f, d4a9039a7b3d8005b90c7b1a55a306444f0e5447 to < 27202e2e8721c3b23831563c36ed5ac7818641ba, 546ea84d07e3e324644025e2aae2d12ea4c5896e to < 91bb18950b88f955838ec0c1d97f74d135756dc7, 546ea84d07e3e324644025e2aae2d12ea4c5896e to < 737d4d91d35b5f7fa5bb442651472277318b0bfd, d7c01c0714c04431b5e18cf17a9ea68a553d1c3c, 5.4.284 to < 5.4.291, 5.10.226 to < 5.10.235, 5.15.167 to < 5.15.179, 6.1.110 to < 6.1.125, 6.6.51 to < 6.6.72, 6.10.10 to < 6.11, 6.11—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/44fe1efb4961c1a5ccab16bb579dfc6b308ad58b
git.kernel.orghttps://git.kernel.org/stable/c/b1a1743aaa4906c41c426eda97e2e2586f79246d
git.kernel.orghttps://git.kernel.org/stable/c/bb0245fa72b783cb23a9949c5048781341e91423
git.kernel.orghttps://git.kernel.org/stable/c/a777e06dfc72bed73c05dcb437d7c27ad5f90f3f
git.kernel.orghttps://git.kernel.org/stable/c/27202e2e8721c3b23831563c36ed5ac7818641ba
git.kernel.orghttps://git.kernel.org/stable/c/91bb18950b88f955838ec0c1d97f74d135756dc7
git.kernel.orghttps://git.kernel.org/stable/c/737d4d91d35b5f7fa5bb442651472277318b0bfd
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-503939.html

01 Record index

CVE-2025-21647

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-21647

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References