Loading story…
CVE-2025-38684 is a moderate-severity flaw in the Linux kernel's Enhanced Transmission Selection (ETS) traffic-control scheduler. A faulty update sequence in ets_qdisc_change() updates q->nbands before unused DWRR classes are purged, leaving cleanup logic to operate on an inconsistent ETS configuration and potentially dereference a NULL pointer. A local attacker can trigger a kernel crash, resulting in denial of service; Red Hat rates the issue CVSS 5.2, while NVD assigns 5.5.
Red Hat has released fixes for standard kernels in RHEL 8, RHEL 9, and RHEL 10. Fixes for the RHEL 8 and RHEL 9 real-time kernels remain deferred, while RHEL 6, RHEL 7, and the RHEL 7 real-time kernel are not affected because they lack the vulnerable code. Organizations using affected kernel packages should apply the available updates and plan mitigation for affected real-time deployments until fixes are released.
See affected versions and whether adversaries are exploiting it.
4 events from the most recent confirmed update back to the earliest known activity.
Red Hat released RHSA-2025:15447, fixing CVE-2025-38684 in the standard RHEL 10 kernel.
Red Hat published CVE-2025-38684 for a NULL-pointer dereference in the Linux kernel ETS traffic-control scheduler. The flaw can allow a local attacker to cause a kernel crash and denial of service during queue-discipline modification.
Red Hat released RHSA-2025:15035 for RHEL 8.4 Advanced Mission Critical Update Support and Extended Update Support Long-Life Add-On kernels, and RHSA-2025:15011 for the standard RHEL 9 kernel, addressing the ETS scheduler NULL-pointer dereference flaw.
Red Hat released RHSA-2025:15785, fixing CVE-2025-38684 in the standard RHEL 8 kernel.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat issued **Important** kernel security updates for **CVE-2025-37914**, a Linux traffic-control flaw in the `net_sched` Enhanced Transmission Selection (ETS) queuing discipline. When ETS uses a `netem` child qdisc, a reentrant enqueue callback can add the same classifier to ETS's active list twice, potentially causing memory corruption. The upstream correction prevents duplicate insertion by confirming both that the queue length is zero and that the class is not already active. The fix was delivered through RHEL 8, 9, and 10 advisories, including RHEL 10 advisory **RHSA-2025:14510**, which also addresses `CVE-2025-38200` in the `i40e` driver and `CVE-2025-38417` in the `ice` driver across supported architectures. Red Hat also released updated Real Time Linux Kernel packages for RHEL 9.2 SAP Solutions and Extended Life Cycle systems under **RHSA-2025:17735**; affected organizations should install `kernel-rt-5.14.0-284.142.1.rt14.427.el9_2` where applicable and reboot after updating.
Aug 26, 2026
**CVE-2023-2177** is a moderate-severity NULL-pointer dereference in the Linux kernel's SCTP stream scheduler, in `net/sctp/stream_sched.c`. On kernels before version 5.19, a failed `stream_in` allocation can free `stream_out` before later code accesses it. A local low-privileged user could trigger a kernel crash and cause denial of service; the issue has no reported confidentiality or integrity impact and carries a Red Hat CVSS v3.1 score of 5.5. An upstream patch corrected SCTP association and stream-initialization error handling by routing failed `sctp_stream_init()` operations through the dedicated stream cleanup path and centralizing allocation-failure cleanup. Red Hat issued errata for affected Red Hat Enterprise Linux 8, RHEL 8.6 Extended Update Support, and RHEL 9 kernel packages; RHEL 6 and 7 variants were listed as not affected. Organizations should deploy the applicable kernel updates, as no separate mitigation is available.
Aug 26, 2026
Red Hat released kernel updates for **RHEL 9** and **RHEL 10** addressing several locally exploitable Linux kernel flaws, including `CVE-2025-21647` in the `sch_cake` traffic-control scheduler. An underflow in per-host bulk-flow fairness counters could lead to an out-of-bounds read, potentially exposing kernel memory or crashing the system; Red Hat assigned it a CVSS 3.1 score of 7.1. The upstream correction adds centralized bounds checking for counter access. The updates also remediate denial-of-service issues in the mt76 `mt7925` Wi-Fi driver (`CVE-2024-57989`), HID core (`CVE-2024-57986`), IDPF driver (`CVE-2024-58057`), and Realtek Bluetooth setup path (`CVE-2024-57987`). These flaws can trigger NULL-pointer dereferences, CPU-workqueue starvation, or system crashes under local attack conditions. RHEL 9 `kernel-rt` remains affected or will not fix for several listed issues; organizations should apply the applicable kernel errata and reboot systems to activate the patched kernel.
Aug 26, 2026