CVE-2025-38107

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-38107
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38107.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38107
Downstream
Related
Published
2025-07-03T08:35:17.487Z
Modified
2026-03-12T02:15:51.752226Z
Summary
net_sched: ets: fix a race in ets_qdisc_change()
Details

In the Linux kernel, the following vulnerability has been resolved:

netsched: ets: fix a race in etsqdisc_change()

Gerrard Tai reported a race condition in ETS, whenever SFQ perturb timer fires at the wrong time.

The race is as follows:

CPU 0 CPU 1 | | [5]: lock root | [6]: rehash | [7]: qdisctreereduce_backlog() | This can be abused to underflow a parent's qlen.

Calling qdiscpurgequeue() instead of qdisctreeflush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38107.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
699d82e9a6db29d509a71f1f2f4316231e6232e6
Fixed
eb7b74e9754e1ba2088f914ad1f57a778b11894b
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ce881ddbdc028fb1988b66e40e45ca0529c23b46
Fixed
0b479d0aa488cb478eb2e1d8868be946ac8afb4f
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b05972f01e7d30419987a1f221b5593668fd6448
Fixed
347867cb424edae5fec1622712c8dd0a2c42918f
Fixed
0383b25488a545be168744336847549d4a2d3d6c
Fixed
073f64c03516bcfaf790f8edc772e0cfb8a84ec3
Fixed
fed94bd51d62d2e0e006aa61480e94e5cd0582b0
Fixed
d92adacdd8c2960be856e0b82acc5b7c5395fddb
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fffa19b5e58c34004a0d6f642d9c24b11d213994
Last affected
fb155f6597cd7bc3aeed668c3bb15fc3b7cb257d

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38107.json"