Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-37992— net_sched: Flush gso_skb list too during ->change()

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未正确处理gso_skb列表，可能导致空指针取消引用。

AI Predicted 5.5 Difficulty: Moderate EPSS 0.22% · P12

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 16

VendorProduct Version RangeStatus
Linux Linux 76e3cc126bb223013a6b9a0e2a51238d1ef2e409< ea1132ccb112f51ba749c56a912f67970c2cd542 affected
76e3cc126bb223013a6b9a0e2a51238d1ef2e409< d3336f746f196c6a53e0480923ae93939f047b6c affected
76e3cc126bb223013a6b9a0e2a51238d1ef2e409< d38939ebe0d992d581acb6885c1723fa83c1fb2c affected
76e3cc126bb223013a6b9a0e2a51238d1ef2e409< a7d6e0ac0a8861f6b1027488062251a8e28150fd affected
76e3cc126bb223013a6b9a0e2a51238d1ef2e409< d1365ca80b012d8a7863e45949e413fb61fa4861 affected
76e3cc126bb223013a6b9a0e2a51238d1ef2e409< fe88c7e4fc2c1cd75a278a15ffbf1689efad4e76 affected
76e3cc126bb223013a6b9a0e2a51238d1ef2e409< 2d3cbfd6d54a2c39ce3244f33f85c595844bd7b8 affected
3.5 affected
… +8 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-37992

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
net_sched: Flush gso_skb list too during ->change()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net_sched: Flush gso_skb list too during ->change() Previously, when reducing a qdisc's limit via the ->change() operation, only the main skb queue was trimmed, potentially leaving packets in the gso_skb list. This could result in NULL pointer dereference when we only check sch->limit against sch->q.qlen. This patch introduces a new helper, qdisc_dequeue_internal(), which ensures both the gso_skb list and the main queue are properly flushed when trimming excess packets. All relevant qdiscs (codel, fq, fq_codel, fq_pie, hhf, pie) are updated to use this helper in their ->change() routines.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未正确处理gso_skb列表，可能导致空指针取消引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 76e3cc126bb223013a6b9a0e2a51238d1ef2e409 ~ ea1132ccb112f51ba749c56a912f67970c2cd542 -
Linux Linux 3.5 -

II. Public POCs for CVE-2025-37992

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-37992

请登录查看更多情报信息。

Patches & Fixes for CVE-2025-37992 (2)

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-37992

No comments yet

Leave a comment