The Linux kernel patch for CVE-2025-38350 fixes a subtle but recurring logic gap in the traffic‑control (net/sched) classful qdisc handling that can lead to a use‑after‑free when a child qdisc unexpectedly goes empty during an enqueue operation, and operators should treat multi‑tenant and...
The Linux kernel CVE tracked as CVE‑2025‑39677 fixes a subtle but real backlog accounting bug in net/sched that affects several widely used queuing disciplines (hhf, fq, fq_codel, fq_pie). Microsoft’s MSRC statement that “Azure Linux includes this open‑source library and is therefore potentially...