Azure Linux 3.0 Security Update: kernel (CVE-2025-38108)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38108 advisory. - In the Linux kernel, the following vulnerability has been resolved: netsched: red: fix a race in redchange...

CVE-2025-38108 net_sched: red: fix a race in __red_change()

In the Linux kernel, the following vulnerability has been resolved: netsched: red: fix a race in redchange Gerrard Tai reported a race condition in RED, whenever SFQ perturb timer fires at the wrong time. The race is as follows: CPU 0 CPU 1 1: lock root 2: qdisctreeflushbacklog 3: unlock root | |...

PT-2025-27694

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition has been identified in the Linux kernel's RED Random Early Detection component. This issue occurs when the SFQ Stochastic Fairness Queuing perturb timer fires at an...

CVE-2025-38083

In the Linux kernel, CVE-2025-38083 is a race in net_sched: prio_tune() that can occur when the SFQ perturb timer fires at the wrong time, potentially allowing underflow of a parent qlen. The issue arises across the prio qdisc path during concurrent qdisc operations (lock/unlock, qdisc_tree_flush...