Red Hat Patches Linux ETS Memory-Corruption Flaw Across RHEL Kernels

Red Hat issued Important kernel security updates for CVE-2025-37914, a Linux traffic-control flaw in the net_sched Enhanced Transmission Selection (ETS) queuing discipline. When ETS uses a netem child qdisc, a reentrant enqueue callback can add the same classifier to ETS's active list twice, potentially causing memory corruption. The upstream correction prevents duplicate insertion by confirming both that the queue length is zero and that the class is not already active.

The fix was delivered through RHEL 8, 9, and 10 advisories, including RHEL 10 advisory RHSA-2025:14510, which also addresses CVE-2025-38200 in the i40e driver and CVE-2025-38417 in the ice driver across supported architectures. Red Hat also released updated Real Time Linux Kernel packages for RHEL 9.2 SAP Solutions and Extended Life Cycle systems under RHSA-2025:17735; affected organizations should install kernel-rt-5.14.0-284.142.1.rt14.427.el9_2 where applicable and reboot after updating.