CNNVD-202507-3443 Information

CNNVD ID

CNNVD-202507-3443

CVE-2025-38477

  • CNNVD Published: 2025-07-28

Description (Chinese)

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞,该漏洞源于qfq_aggregate竞争条件,可能导致空指针取消引用或释放后重用。

Description (English)

Linux Kernel is the kernel used by Linux, the Open Source Operator System of the Linux Foundation of the United States. There is a security loophole in Linux Kernel, which stems from the qfq aggregate competitive conditions, which may lead to the elimination of the citation or reuse of the empty pointer after release.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Linux

Published

2025-07-28

Last Modified

2026-02-24

References

https://git.kernel.org/stable/c/fbe48f06e64134dfeafa89ad23387f66ebca3527 https://git.kernel.org/stable/c/d841aa5518508ab195b6781ad0d73ee378d713dd https://git.kernel.org/stable/c/c6df794000147a3a02f79984aada4ce83f8d0a1e https://git.kernel.org/stable/c/c000a3a330d97f6c073ace5aa5faf94b9adb4b79 https://git.kernel.org/stable/c/aa7a22c4d678bf649fd3a1d27debec583563414d https://git.kernel.org/stable/c/a6d735100f602c830c16d69fb6d780eebd8c9ae1 https://git.kernel.org/stable/c/5e28d5a3f774f118896aec17a3a20a9c5c9dfc64 https://git.kernel.org/stable/c/466e10194ab81caa2ee6a332d33ba16bcceeeba6 https://nvd.nist.gov/vuln/detail/CVE-2025-38477 https://vigilance.fr/vulnerability/Linux-kernel-multiple-vulnerabilities-dated-29-07-2025-47805 https://access.redhat.com/security/cve/cve-2025-38477

Patch

https://www.kernel.org/

Share on: