CVE-2025-38193

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A vulnerability in the Linux kernel has been resolved, related to the SFQ perturb period in the net sched module. The issue was reported by Gerrard Tai, who found that the SFQ perturb period had no range check, which could be used to trigger a race condition. To prevent this, a check has been added to ensure that ctl->perturb period * HZ will not overflow and is positive. The vulnerability can be triggered by setting an invalid perturb period, such as a negative value or a value that is too large.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.