Log in Start free

Vulnerability · Published May 20, 2025 · Assigned by Linux

CVE-2025-37915net_sched: drr: Fix double list add in class with netem as child qdisc

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 86.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: net_sched: drr: Fix double list add in class with netem as child qdisc As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of drr, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption. In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before adding to the list to cover for the reentrant case. [1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.140-1DEBIAN-CVE-2025-37915
Debian:12linux6.1.140-1DSA-5925-1
Debian:13linux6.12.29-1DEBIAN-CVE-2025-37915
Debian:14linux6.12.29-1DEBIAN-CVE-2025-37915
Ubuntu:22.04:LTSlinux5.15.0-144.157UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux6.8.0-100.100UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-aws5.15.0-1088.95UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-aws6.8.0-1046.49UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-aws-6.146.14.0-1009.9~24.04.1USN-7665-2
Ubuntu:24.04:LTSlinux-aws-6.146.14.0-1009.9~24.04.1UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1046.49~22.04.1UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-azure5.15.0-1094.103UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-azure6.8.0-1046.52UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1051.57~22.04.1UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1094.103.1UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1046.53UBUNTU-CVE-2025-37915
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1046.53~22.04.1UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-gcp5.15.0-1087.96UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-gcp6.8.0-1047.50UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-gcp-6.146.14.0-1011.11~24.04.1UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1047.50~22.04.2UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-gke5.15.0-1085.91UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-gke6.8.0-1043.48UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1070.78UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1030.33UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-100.100~22.04.1UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-ibm5.15.0-1080.83UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-ibm6.8.0-1044.44UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1044.44~22.04.1UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1083.89UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-kvm5.15.0-1084.89UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-144.157UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-100.100.1UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-100.100.1~22.04.1UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1082.83UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1046.49UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1046.49~22.04.1UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1046.49.1UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1041.41UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1020.20UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1030.30UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-oem-6.146.14.0-1007.7USN-7650-1
Ubuntu:24.04:LTSlinux-oem-6.146.14.0-1007.7UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-oracle5.15.0-1085.91UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-oracle6.8.0-1043.44UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-oracle-6.146.14.0-1009.9~24.04.1UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1043.44~22.04.1UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-raspi5.15.0-1083.86UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-raspi6.8.0-1047.51UBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-riscv-6.146.14.0-24.24.1~24.04.1UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-100.100~22.04.1UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-37915
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1023.24UBUNTU-CVE-2025-37915
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1052.56UBUNTU-CVE-2025-37915

Affected products (as reported)

VendorProductVersions
Linux Linux 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea – before 5da3aad1a13e7edb8ff0778a444ccf49930313e937d9cf1a3ce35de3df6f7d209bfb1f50cf188cea – before 4b07ac06b0a712923255aaf2691637693fc7100d37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea – before 2968632880f1792007eedd12eeedf7f6e2b7e9f337d9cf1a3ce35de3df6f7d209bfb1f50cf188cea – before 4f0ecf50cdf76da95828578a92f130b653ac2fcf37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea – before db205b92dfe0501e5b92fb7cf00971d0e44ba3eb37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea – before 26e75716b94d6ff9be5ea07d63675c4d189f30b437d9cf1a3ce35de3df6f7d209bfb1f50cf188cea – before ab2248110738d4429668140ad22f530a9ee730e137d9cf1a3ce35de3df6f7d209bfb1f50cf188cea – before f99a3fbf023e20b626be4b0f042463d598050c9a
Linux Linux 5.0

References