7.8

CVE-2025-38107: debian debian_linux Race Condition

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2025-38107DEBIAN-CVE-2025-38107
Published 03-07-2025Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2025-38107 is a high (CVSS 7.8) Race Condition vulnerability in debian debian_linux. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 3.9% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.15%
0%100%
Low · +0.02 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 53 · Related 48
DLA-4327-1DLA-4328-1DSA-5973-1MGASA-2025-0218MGASA-2025-0219OPENSUSE-SU-2025:20081-1

Timeline

  1. 03-07-2025
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: fix a race in ets_qdisc_change() Gerrard Tai reported a race condition in ETS, whenever SFQ perturb timer fires at the wrong time. The race is as follows: CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put() This can be abused to underflow a parent's qlen. Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.15%

Chance of exploitation in the next 30 days

Percentile

4%

Versus all other CVEs

30-day change

+0.02 pp

From 0.13% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu141 products
  • linuxAll versions (No fix recorded) | < 5.15.0-156.166 | < 6.8.0-100.100
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1092.99 | < 6.8.0-1046.49
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ 699d82e9a6db29d509a71f1f2f4316231e6232e6, < eb7b74e9754e1ba2088f914ad1f57a778b11894b | ≥ ce881ddbdc028fb1988b66e40e45ca0529c23b46, < 0b479d0aa488cb478eb2e1d8868be946ac8afb4f | ≥ b05972f01e7d30419987a1f221b5593668fd6448, < 347867cb424edae5fec1622712c8dd0a2c42918f | ≥ b05972f01e7d30419987a1f221b5593668fd6448, < 0383b25488a545be168744336847549d4a2d3d6c | ≥ b05972f01e7d30419987a1f221b5593668fd6448, < 073f64c03516bcfaf790f8edc772e0cfb8a84ec3 | ≥ b05972f01e7d30419987a1f221b5593668fd6448, < fed94bd51d62d2e0e006aa61480e94e5cd0582b0 | ≥ b05972f01e7d30419987a1f221b5593668fd6448, < d92adacdd8c2960be856e0b82acc5b7c5395fddb | fffa19b5e58c34004a0d6f642d9c24b11d213994 | fb155f6597cd7bc3aeed668c3bb15fc3b7cb257d | ≥ 5.10.142, < 5.10.239 | ≥ 5.15.66, < 5.15.186 | ≥ 5.4.213, < 5.5 | ≥ 5.19.8, < 5.20 | 6.0
  • linux_kernelEOL≥ 5.4.213, < 5.5 | ≥ 5.10.142, < 5.10.239 | ≥ 5.15.66, < 5.15.186 | ≥ 5.19.8, < 6.0 | ≥ 6.0.1, < 6.1.142 | ≥ 6.2, < 6.6.94 | ≥ 6.7, < 6.12.34 | ≥ 6.13, < 6.15.3 | 6.0 | 6.0:rc4 | 6.0:rc5 | 6.0:rc6 | 6.0:rc7 | 6.16:rc1

3 vendors · 145 products

References

45 links
Show all 45 references