7.8

CVE-2025-37913: debian debian_linux Double Free

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2025-37913DEBIAN-CVE-2025-37913
Published 20-05-2025Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2025-37913 is a high (CVSS 7.8) Double Free vulnerability in debian debian_linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 13.7% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.24%
0%100%
Low · +0.02 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 50 · Related 44
DLA-4271-1DLA-4327-1DSA-5925-1LSN-0122-1MGASA-2025-0182MGASA-2025-0183

Timeline

  1. 20-05-2025
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: net_sched: qfq: Fix double list add in class with netem as child qdisc As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of qfq, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption. This patch checks whether the class was already added to the agg->active list (cl_is_active) before doing the addition to cater for the reentrant case. [1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.24%

Chance of exploitation in the next 30 days

Percentile

14%

Versus all other CVEs

30-day change

+0.02 pp

From 0.22% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu140 products
  • linuxAll versions (No fix recorded) | < 5.15.0-144.157 | < 6.8.0-100.100
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1088.95 | < 6.8.0-1046.49
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea, < 041f410aec2c1751ee22b8b73ba05d38c3a6a602 | ≥ 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea, < 005a479540478a820c52de098e5e767e63e36f0a | ≥ 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea, < 0bf32d6fb1fcbf841bb9945570e0e2a70072c00f | ≥ 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea, < 0aa23e0856b7cedb3c88d8e3d281c212c7e4fbeb | ≥ 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea, < a43783119e01849fbf2fe8855634e8989b240cb4 | ≥ 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea, < 53bc0b55178bd59bdd4bcd16349505cabf54b1a2 | ≥ 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea, < 370218e8ce711684acc4cdd3cc3c6dd7956bc165 | ≥ 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea, < f139f37dcdf34b67f5bf92bc8e0f7f6b3ac63aa4 | 5.0
  • linux_kernel≥ 5.0.1, < 5.4.294 | ≥ 5.5, < 5.10.238 | ≥ 5.11, < 5.15.182 | ≥ 5.16, < 6.1.138 | ≥ 6.2, < 6.6.90 | ≥ 6.7, < 6.12.28 | ≥ 6.13, < 6.14.6 | 5.0 | 5.0:rc3 | 5.0:rc4 | 5.0:rc5 | 5.0:rc6 | 5.0:rc7 | 5.0:rc8 | 6.15:rc1 | 6.15:rc2 | 6.15:rc3 | 6.15:rc4

3 vendors · 144 products

References

47 links
Show all 47 references