cve 2025 38350

CVE-2025-38350 is a Linux kernel vulnerability in the net/sched classful qdisc (queueing discipline) subsystem that can lead to a use-after-free condition. The flaw occurs when a child qdisc unexpectedly becomes empty during an enqueue operation, creating a logic gap that attackers may exploit to cause memory corruption or system instability. A kernel patch has been released to fix this issue. Administrators running multi-tenant or network-facing hosts should prioritize applying the update to mitigate potential exploitation. This tag covers discussions about the vulnerability, its impact on traffic control, and remediation steps for affected Linux systems.