01 Record

CVE-2025-37890

net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.21% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 11.2% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-07-30.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-05-16 13:01Z1 YR AGO

Last updated

2026-08-05 11:58Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

873cdafd2e4223b187e3de4585887aeb125dabbd5d61f16c594d010a88203223

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to < 273bbcfa53541cde38b2003ad88a59b770306421, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to < e0cf8ee23e1915431f262a7b2dee0c7a7d699af0, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to < e3e949a39a91d1f829a4890e7dfe9417ac72e4d0, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to < 8df7d37d626430035b413b97cee18396b3450bef, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to < 6082a87af4c52f58150d40dec1716011d871ac21, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to < 2e7093c7a8aba5d4f8809f271488e5babe75e202, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to < ac39fd4a757584d78ed062d4f6fd913f83bd98b5, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to < 141d34391abbb315d68556b7c67ad97885407547, 5.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/273bbcfa53541cde38b2003ad88a59b770306421
git.kernel.orghttps://git.kernel.org/stable/c/e0cf8ee23e1915431f262a7b2dee0c7a7d699af0
git.kernel.orghttps://git.kernel.org/stable/c/e3e949a39a91d1f829a4890e7dfe9417ac72e4d0
git.kernel.orghttps://git.kernel.org/stable/c/8df7d37d626430035b413b97cee18396b3450bef
git.kernel.orghttps://git.kernel.org/stable/c/6082a87af4c52f58150d40dec1716011d871ac21
git.kernel.orghttps://git.kernel.org/stable/c/2e7093c7a8aba5d4f8809f271488e5babe75e202
git.kernel.orghttps://git.kernel.org/stable/c/ac39fd4a757584d78ed062d4f6fd913f83bd98b5
git.kernel.orghttps://git.kernel.org/stable/c/141d34391abbb315d68556b7c67ad97885407547
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/08/msg00010.html

01 Record index

CVE-2025-37890

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-37890

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References