CVE-2025-38087

HighCVSS 7.8/10Last modified Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net/sched: fix use-after-free in taprio_dev_notifier

Since taprio’s taprio_dev_notifier() isn’t protected by an RCU read-side critical section, a race with advance_sched() can lead to a use-after-free.

Adding rcu_read_lock() inside taprio_dev_notifier() prevents this.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= fed87cc6718ad5f80aa739fee3c5979a8b09d3a6, < 8c5713ce1ced75f9e9ed5c642ea3d2ba06ead69c; >= fed87cc6718ad5f80aa739fee3c5979a8b09d3a6, < 8a008c89e5e5c5332e4c0a33d707db9ddd529f8a; >= fed87cc6718ad5f80aa739fee3c5979a8b09d3a6, < b1547d28ba468bc3b88764efd13e4319bab63be8; >= fed87cc6718ad5f80aa739fee3c5979a8b09d3a6, < b160766e26d4e2e2d6fe2294e0b02f92baefcec5
LinuxLinux6.3

References

Timeline

Published
Jun 30, 2025
Last modified
Jul 30, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-380887.1In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memCVE-2025-380895.5In the Linux kernel, the following vulnerability has been resolved: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error tiCVE-2025-38097.2The Debug Log Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the auto-refresh debug log in all versions up toCVE-2025-380905.5In the Linux kernel, the following vulnerability has been resolved: drivers/rapidio/rio_cm.c: prevent possible heap overwrite In riocm_cdCVE-2025-380917.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check stream id dml21 wrapper to get plane_id [Why & CVE-2025-380925.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: use list_first_entry_or_null for opinfo_get_list() The list_firCVE-2025-380935.5In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: x1e80100: Add GPU cooling Unlike the CPU, the GPU doCVE-2025-380945.5In the Linux kernel, the following vulnerability has been resolved: net: cadence: macb: Fix a possible deadlock in macb_halt_tx. There is CVE-2025-380955.5In the Linux kernel, the following vulnerability has been resolved: dma-buf: insert memory barrier before updating num_fences smp_store_mbCVE-2025-380965.5In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: don't warn when if there is a FW error iwl_trans_reclaiCVE-2025-380975.5In the Linux kernel, the following vulnerability has been resolved: espintcp: remove encap socket caching to avoid reference leak The currCVE-2025-380985.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Don't treat wb connector as physical in create_validat
CVE-2025-38087: High severity, CVSS 7.8 | Vulnix