A race in the Linux packet scheduler has produced a quietly serious kernel advisory: CVE-2025-38477 patches a race condition in the net/sched sch_qfq implementation that can lead to NULL dereferences and use‑after‑free behavior, and Microsoft’s public advisory names Azure Linux as a confirmed...