CVE-2025-38001

CVE-2025-38001 RBTree Family Drama Linux HFSC Eltree Use-After-Free - Debian 12 PoC This PoC utilizes a page-level data-only attack based on RBTree transformations to compromise the system. The exploit is portable and works on all kernelCTF instances LTS 6.6.90, COS 109, COS 105 and Debian 12. On...

CVE-2025-38001

In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Address reentrant enqueue adding class to eltree twice Savino says: "We are writing to report that this recent patch 141d34391abbb315d68556b7c67ad97885407547 1 can be bypassed, and a UAF can still occur when HFSC ...