CVE-2025-37823

In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer.

CVSS 3.1

7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-25)

CWE

CWE-416

Published

2025-05-08

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• debian:debian_linux
• linux:linux_kernel

References

• https://git.kernel.org/stable/c/11bccb054c1462fb069219f8e98e97a5a730758e
• https://git.kernel.org/stable/c/2f46d14919c39528c6e540ebc43f90055993eedc
• https://git.kernel.org/stable/c/68f256305ceb426d545a0dc31f83c2ab1d211a1e
• https://git.kernel.org/stable/c/6ccbda44e2cc3d26fd22af54c650d6d5d801addf
• https://git.kernel.org/stable/c/76c4c22c2437d3d3880efc0f62eca06ef078d290

Check your stackJSON