CVE-2025-37823: linux kernel +1 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2025-37823

CVSS 7.8 · High EPSS 0,23%

Kerentanan Use After Free pada linux kernel, debian linux. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer.

Rincian

Terbit di NVD: 8 Mei 2025
Terakhir diubah: 30 Juli 2026
Status NVD: Modified
CVSS 3.1: 7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-416: Use After Free
EPSS (30 hari): 0,23% peluang dieksploitasi; lebih tinggi dari 12,6% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
linux	linux kernel	Versi 2.6.13 hingga sebelum 5.4.293
linux	linux kernel	Versi 5.5 hingga sebelum 5.10.237
linux	linux kernel	Versi 5.11 hingga sebelum 5.15.181
linux	linux kernel	Versi 5.16 hingga sebelum 6.1.136
linux	linux kernel	Versi 6.2 hingga sebelum 6.6.89
linux	linux kernel	Versi 6.7 hingga sebelum 6.12.26
linux	linux kernel	Versi 6.13 hingga sebelum 6.14.5
linux	linux kernel	Versi 2.6.12
linux	linux kernel	Versi 2.6.12 rc2
linux	linux kernel	Versi 2.6.12 rc3
linux	linux kernel	Versi 2.6.12 rc4
linux	linux kernel	Versi 2.6.12 rc5
linux	linux kernel	Versi 6.15 rc1
linux	linux kernel	Versi 6.15 rc2
linux	linux kernel	Versi 6.15 rc3
debian	debian linux	Versi 11.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://git.kernel.org/stable/c/11bccb054c1462fb069219f8e98e97a5a730758e patch
https://git.kernel.org/stable/c/2f46d14919c39528c6e540ebc43f90055993eedc patch
https://git.kernel.org/stable/c/68f256305ceb426d545a0dc31f83c2ab1d211a1e patch
https://git.kernel.org/stable/c/6ccbda44e2cc3d26fd22af54c650d6d5d801addf patch
https://git.kernel.org/stable/c/76c4c22c2437d3d3880efc0f62eca06ef078d290 patch
https://git.kernel.org/stable/c/c6936266f8bf98a53f28ef9a820e6a501e946d09 patch
https://git.kernel.org/stable/c/c6f035044104c6ff656f4565cd22938dc892528c patch
https://git.kernel.org/stable/c/da7936518996d290e2fcfcaf6cd7e15bfd87804a patch
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html mailing list · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html mailing list · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.