CVE-2025-38350: Use After Free

🗓️ 19 Jul 2025 00:00:00Reported by Rapid7Type

rapid7🔗 www.rapid7.com

Use After Free in Linux kernel net/sched via qlen_notify on empty child qdiscs.

Reporter	Title	Published	Views	Family All 454
IBM Security Bulletins	Security Bulletin: Vulnerabilities in kernel affects IBM Netezza Appliance	23 Apr 202607:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM TXSeries for Multiplatforms is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability & a use-after-free (UAF) vulnerability found in Linux kernel packages.	9 Oct 202511:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability & a use-after-free (UAF) vulnerability found in Linux kernel packages.	14 Oct 202509:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability & a use-after-free (UAF) vulnerability found in Linux kernel packages.	13 Oct 202512:33	–	ibm
Tenable Nessus	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-1111)	4 Aug 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2025-1130)	4 Aug 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2025-101 (ALASKERNEL-5.10-2025-101)	9 Aug 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2025-084 (ALASKERNEL-5.15-2025-084)	30 Jul 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2025-106 (ALASKERNEL-5.4-2025-106)	9 Aug 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : kernel (ALSA-2025:15011)	29 Sep 202500:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-38350
cwe	www.cwe.mitre.org/data/definitions/416.html
git	www.git.kernel.org/stable/c/103406b38c600fec1fe375a77b27d87e314aea09
git	www.git.kernel.org/stable/c/3b290923ad2b23596208c1e29520badef4356a43
git	www.git.kernel.org/stable/c/7874c9c132e906a52a187d045995b115973c93fb
git	www.git.kernel.org/stable/c/a44acdd9e84a211989ff4b9b92bf3545d8456ad5
git	www.git.kernel.org/stable/c/a553afd91f55ff39b1e8a1c4989a29394c9e0472
git	www.git.kernel.org/stable/c/e269f29e9395527bc00c213c6b15da04ebb35070
git	www.git.kernel.org/stable/c/e9921b57dca05ac5f4fa1fa8e993d4f0ee52e2b7
git	www.git.kernel.org/stable/c/f680a4643c6f71e758d8fe0431a958e9a6a4f59d

05 Aug 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.8

EPSS0.00191

SSVC

Linux kernel net/sched Use After Free qdisc qlen_notify HFSC