7.8
Élevée
CVE-2025-38477 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix race condition on…
Description
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix race condition on qfq_aggregate A race condition can occur when 'agg' is modified in qfq_change_agg (called during qfq_enqueue) while other threads access it concurrently. For example, qfq_dump_class may trigger a NULL dereference, and qfq_delete_class may cause a use-after-free. This patch addresses the issue by: 1. Moved qfq_destroy_class into the critical section. 2. Added sch_tree_lock protection to qfq_dump_class and qfq_dump_class_stats.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux 6.16 | premières → < 6.16 | 6.16 |
| Linux 6.15 | premières → < 6.15.8 | 6.15.8 |
| Linux 6.12 | premières → < 6.12.40 | 6.12.40 |
| Linux 6.6 | premières → < 6.6.100 | 6.6.100 |
| Linux 6.1 | premières → < 6.1.147 | 6.1.147 |
| Linux 5.15 | premières → < 5.15.190 | 5.15.190 |
| Linux 5.10 | premières → < 5.10.241 | 5.10.241 |
| Linux 5.4 | premières → < 5.4.297 | 5.4.297 |
| Linux | 3.8 | Pas de correctif indiqué |
Afficher les 3 autres branches Masquer les 3 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → dernières | Pas de correctif indiqué |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.5 → dernières | Pas de correctif indiqué |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → dernières | Pas de correctif indiqué |
Autres CVE de Linux
Les 18286 CVE de Linux →
CVE-2026-100082
xen-blkback: Avoid UAF when reading I/O statistics
Non notée
CVE-2026-100081
xen-netback: defer xenvif_mcast_addr_list_free()
Non notée
CVE-2026-100080
xen-netback: Fix UAF when reading statistics data
Non notée
CVE-2026-99270
tcp: Fix potential UAF in reqsk_timer_handler().
8.1
Élevée