01 Record

CVE-2025-38108

net_sched: red: fix a race in __red_change()

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

net_sched: red: fix a race in __red_change()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.14% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 3.6% of scored records. A rank, not a probability.
NVD base score: 7.0 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-07-03 08:35Z1 YR AGO

Last updated

2026-08-05 11:59Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Class
CWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionBase

Data version

5.2

Document digest

f0c476b5987561b6c79e4f3996371366a777af144865b8afec5697f8824c7167

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux0c8d13ac96070000da33f394f45e9c19638483c5 to < 2790c4ec481be45a80948d059cd7c9a06bc37493, 0c8d13ac96070000da33f394f45e9c19638483c5 to < a1bf6a4e9264a685b0e642994031f9c5aad72414, 0c8d13ac96070000da33f394f45e9c19638483c5 to < 110a47efcf23438ff8d31dbd9c854fae2a48bf98, 0c8d13ac96070000da33f394f45e9c19638483c5 to < f569984417a4e12c67366e69bdcb752970de921d, 0c8d13ac96070000da33f394f45e9c19638483c5 to < 2a71924ca4af59ffc00f0444732b6cd54b153d0e, 0c8d13ac96070000da33f394f45e9c19638483c5 to < 4b755305b2b0618e857fdadb499365b5f2e478d1, 0c8d13ac96070000da33f394f45e9c19638483c5 to < 444ad445df5496a785705019268a8a84b84484bb, 0c8d13ac96070000da33f394f45e9c19638483c5 to < 85a3e0ede38450ea3053b8c45d28cf55208409b8, 5.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/2790c4ec481be45a80948d059cd7c9a06bc37493
git.kernel.orghttps://git.kernel.org/stable/c/a1bf6a4e9264a685b0e642994031f9c5aad72414
git.kernel.orghttps://git.kernel.org/stable/c/110a47efcf23438ff8d31dbd9c854fae2a48bf98
git.kernel.orghttps://git.kernel.org/stable/c/f569984417a4e12c67366e69bdcb752970de921d
git.kernel.orghttps://git.kernel.org/stable/c/2a71924ca4af59ffc00f0444732b6cd54b153d0e
git.kernel.orghttps://git.kernel.org/stable/c/4b755305b2b0618e857fdadb499365b5f2e478d1
git.kernel.orghttps://git.kernel.org/stable/c/444ad445df5496a785705019268a8a84b84484bb
git.kernel.orghttps://git.kernel.org/stable/c/85a3e0ede38450ea3053b8c45d28cf55208409b8
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

01 Record index

CVE-2025-38108

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38108

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References