GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2025-37992 (GCVE-0-2025-37992)

Vulnerability from cvelistv5 – Published: 2025-05-26 14:54 – Updated: 2026-05-11 21:19
VLAI
Title
net_sched: Flush gso_skb list too during ->change()
Summary
In the Linux kernel, the following vulnerability has been resolved: net_sched: Flush gso_skb list too during ->change() Previously, when reducing a qdisc's limit via the ->change() operation, only the main skb queue was trimmed, potentially leaving packets in the gso_skb list. This could result in NULL pointer dereference when we only check sch->limit against sch->q.qlen. This patch introduces a new helper, qdisc_dequeue_internal(), which ensures both the gso_skb list and the main queue are properly flushed when trimming excess packets. All relevant qdiscs (codel, fq, fq_codel, fq_pie, hhf, pie) are updated to use this helper in their ->change() routines.
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 76e3cc126bb223013a6b9a0e2a51238d1ef2e409 , < ea1132ccb112f51ba749c56a912f67970c2cd542 (git)
Affected: 76e3cc126bb223013a6b9a0e2a51238d1ef2e409 , < d3336f746f196c6a53e0480923ae93939f047b6c (git)
Affected: 76e3cc126bb223013a6b9a0e2a51238d1ef2e409 , < d38939ebe0d992d581acb6885c1723fa83c1fb2c (git)
Affected: 76e3cc126bb223013a6b9a0e2a51238d1ef2e409 , < a7d6e0ac0a8861f6b1027488062251a8e28150fd (git)
Affected: 76e3cc126bb223013a6b9a0e2a51238d1ef2e409 , < d1365ca80b012d8a7863e45949e413fb61fa4861 (git)
Affected: 76e3cc126bb223013a6b9a0e2a51238d1ef2e409 , < fe88c7e4fc2c1cd75a278a15ffbf1689efad4e76 (git)
Affected: 76e3cc126bb223013a6b9a0e2a51238d1ef2e409 , < 2d3cbfd6d54a2c39ce3244f33f85c595844bd7b8 (git)
guessed Create a notification for this product.
Linux Linux Affected: 3.5
Unaffected: 0 , < 3.5 (semver)
Unaffected: 5.10.238 , ≤ 5.10.* (semver)
Unaffected: 5.15.184 , ≤ 5.15.* (semver)
Unaffected: 6.1.140 , ≤ 6.1.* (semver)
Unaffected: 6.6.92 , ≤ 6.6.* (semver)
Unaffected: 6.12.30 , ≤ 6.12.* (semver)
Unaffected: 6.14.8 , ≤ 6.14.* (semver)
Unaffected: 6.15 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:58:06.592Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "include/net/sch_generic.h",
            "net/sched/sch_codel.c",
            "net/sched/sch_fq.c",
            "net/sched/sch_fq_codel.c",
            "net/sched/sch_fq_pie.c",
            "net/sched/sch_hhf.c",
            "net/sched/sch_pie.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ea1132ccb112f51ba749c56a912f67970c2cd542",
              "status": "affected",
              "version": "76e3cc126bb223013a6b9a0e2a51238d1ef2e409",
              "versionType": "git"
            },
            {
              "lessThan": "d3336f746f196c6a53e0480923ae93939f047b6c",
              "status": "affected",
              "version": "76e3cc126bb223013a6b9a0e2a51238d1ef2e409",
              "versionType": "git"
            },
            {
              "lessThan": "d38939ebe0d992d581acb6885c1723fa83c1fb2c",
              "status": "affected",
              "version": "76e3cc126bb223013a6b9a0e2a51238d1ef2e409",
              "versionType": "git"
            },
            {
              "lessThan": "a7d6e0ac0a8861f6b1027488062251a8e28150fd",
              "status": "affected",
              "version": "76e3cc126bb223013a6b9a0e2a51238d1ef2e409",
              "versionType": "git"
            },
            {
              "lessThan": "d1365ca80b012d8a7863e45949e413fb61fa4861",
              "status": "affected",
              "version": "76e3cc126bb223013a6b9a0e2a51238d1ef2e409",
              "versionType": "git"
            },
            {
              "lessThan": "fe88c7e4fc2c1cd75a278a15ffbf1689efad4e76",
              "status": "affected",
              "version": "76e3cc126bb223013a6b9a0e2a51238d1ef2e409",
              "versionType": "git"
            },
            {
              "lessThan": "2d3cbfd6d54a2c39ce3244f33f85c595844bd7b8",
              "status": "affected",
              "version": "76e3cc126bb223013a6b9a0e2a51238d1ef2e409",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "include/net/sch_generic.h",
            "net/sched/sch_codel.c",
            "net/sched/sch_fq.c",
            "net/sched/sch_fq_codel.c",
            "net/sched/sch_fq_pie.c",
            "net/sched/sch_hhf.c",
            "net/sched/sch_pie.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.5"
            },
            {
              "lessThan": "3.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.238",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.184",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.92",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.30",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.14.*",
              "status": "unaffected",
              "version": "6.14.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.15",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.238",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.184",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.140",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.92",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.30",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.14.8",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: Flush gso_skb list too during -\u003echange()\n\nPreviously, when reducing a qdisc\u0027s limit via the -\u003echange() operation, only\nthe main skb queue was trimmed, potentially leaving packets in the gso_skb\nlist. This could result in NULL pointer dereference when we only check\nsch-\u003elimit against sch-\u003eq.qlen.\n\nThis patch introduces a new helper, qdisc_dequeue_internal(), which ensures\nboth the gso_skb list and the main queue are properly flushed when trimming\nexcess packets. All relevant qdiscs (codel, fq, fq_codel, fq_pie, hhf, pie)\nare updated to use this helper in their -\u003echange() routines."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T21:19:12.976Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ea1132ccb112f51ba749c56a912f67970c2cd542"
        },
        {
          "url": "https://git.kernel.org/stable/c/d3336f746f196c6a53e0480923ae93939f047b6c"
        },
        {
          "url": "https://git.kernel.org/stable/c/d38939ebe0d992d581acb6885c1723fa83c1fb2c"
        },
        {
          "url": "https://git.kernel.org/stable/c/a7d6e0ac0a8861f6b1027488062251a8e28150fd"
        },
        {
          "url": "https://git.kernel.org/stable/c/d1365ca80b012d8a7863e45949e413fb61fa4861"
        },
        {
          "url": "https://git.kernel.org/stable/c/fe88c7e4fc2c1cd75a278a15ffbf1689efad4e76"
        },
        {
          "url": "https://git.kernel.org/stable/c/2d3cbfd6d54a2c39ce3244f33f85c595844bd7b8"
        }
      ],
      "title": "net_sched: Flush gso_skb list too during -\u003echange()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-37992",
    "datePublished": "2025-05-26T14:54:15.796Z",
    "dateReserved": "2025-04-16T04:51:23.976Z",
    "dateUpdated": "2026-05-11T21:19:12.976Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-37992",
      "date": "2026-09-16",
      "epss": "0.00201",
      "percentile": "0.10199"
    },
    "microsoft_vex": {
      "current_release_date": "2026-02-18T01:56:24.000Z",
      "cve": "CVE-2025-37992",
      "id": "msrc_CVE-2025-37992",
      "initial_release_date": "2025-05-02T00:00:00.000Z",
      "product_status:fixed": "2",
      "product_status:known_affected": "2",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "net_sched: Flush gso_skb list too during -\u003echange()",
      "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-37992.json",
      "version": "2"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-37992\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-05-26T15:15:19.770\",\"lastModified\":\"2026-06-17T09:15:50.360\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet_sched: Flush gso_skb list too during -\u003echange()\\n\\nPreviously, when reducing a qdisc\u0027s limit via the -\u003echange() operation, only\\nthe main skb queue was trimmed, potentially leaving packets in the gso_skb\\nlist. This could result in NULL pointer dereference when we only check\\nsch-\u003elimit against sch-\u003eq.qlen.\\n\\nThis patch introduces a new helper, qdisc_dequeue_internal(), which ensures\\nboth the gso_skb list and the main queue are properly flushed when trimming\\nexcess packets. All relevant qdiscs (codel, fq, fq_codel, fq_pie, hhf, pie)\\nare updated to use this helper in their -\u003echange() routines.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net_sched: Vaciar tambi\u00e9n la lista gso_skb durante -\u0026gt;change(). Anteriormente, al reducir el l\u00edmite de una qdisc mediante la operaci\u00f3n -\u0026gt;change(), solo se recortaba la cola principal de skb, lo que pod\u00eda dejar paquetes en la lista gso_skb. Esto pod\u00eda provocar una desreferencia de puntero nulo al comparar \u00fanicamente sch-\u0026gt;limit con sch-\u0026gt;q.qlen. Este parche introduce un nuevo asistente, qdisc_dequeue_internal(), que garantiza que tanto la lista gso_skb como la cola principal se vac\u00eden correctamente al recortar los paquetes sobrantes. Todas las qdisc relevantes (codel, fq, fq_codel, fq_pie, hhf, pie) se han actualizado para usar este asistente en sus rutinas -\u0026gt;change().\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"include/net/sch_generic.h\",\"net/sched/sch_codel.c\",\"net/sched/sch_fq.c\",\"net/sched/sch_fq_codel.c\",\"net/sched/sch_fq_pie.c\",\"net/sched/sch_hhf.c\",\"net/sched/sch_pie.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\"lessThan\":\"ea1132ccb112f51ba749c56a912f67970c2cd542\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\"lessThan\":\"d3336f746f196c6a53e0480923ae93939f047b6c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\"lessThan\":\"d38939ebe0d992d581acb6885c1723fa83c1fb2c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\"lessThan\":\"a7d6e0ac0a8861f6b1027488062251a8e28150fd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\"lessThan\":\"d1365ca80b012d8a7863e45949e413fb61fa4861\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\"lessThan\":\"fe88c7e4fc2c1cd75a278a15ffbf1689efad4e76\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\"lessThan\":\"2d3cbfd6d54a2c39ce3244f33f85c595844bd7b8\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"include/net/sch_generic.h\",\"net/sched/sch_codel.c\",\"net/sched/sch_fq.c\",\"net/sched/sch_fq_codel.c\",\"net/sched/sch_fq_pie.c\",\"net/sched/sch_hhf.c\",\"net/sched/sch_pie.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"3.5\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"3.5\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.238\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.184\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.140\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.92\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.30\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.14.8\",\"lessThanOrEqual\":\"6.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.15\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.5\",\"versionEndExcluding\":\"5.10.238\",\"matchCriteriaId\":\"7244E633-6559-451A-9EB0-EBFBE2A53541\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.184\",\"matchCriteriaId\":\"8E22C14E-E3DF-4919-9ECC-78C6CBCA9D70\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.140\",\"matchCriteriaId\":\"EEA541CD-1863-4E7F-85F5-EAC305910323\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.92\",\"matchCriteriaId\":\"7787FD66-D748-44AF-A052-DE495E1E23AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.30\",\"matchCriteriaId\":\"8F43EF2E-9448-4BCA-99D9-DAEAEB7523C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.14.8\",\"matchCriteriaId\":\"D4458049-AD51-4F1B-BAB9-C32B53A54DE1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"8D465631-2980-487A-8E65-40AE2B9F8ED1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C9D071F-B28E-46EC-AC61-22B913390211\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"13FC0DDE-E513-465E-9E81-515702D49B74\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C7B5B0E-4EEB-48F5-B4CF-0935A7633845\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D240580-3048-49B2-9E27-F115A9DF8224\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"90320558-E553-4EF5-8A0B-0F5D20113BD2\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/2d3cbfd6d54a2c39ce3244f33f85c595844bd7b8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a7d6e0ac0a8861f6b1027488062251a8e28150fd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d1365ca80b012d8a7863e45949e413fb61fa4861\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d3336f746f196c6a53e0480923ae93939f047b6c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d38939ebe0d992d581acb6885c1723fa83c1fb2c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ea1132ccb112f51ba749c56a912f67970c2cd542\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fe88c7e4fc2c1cd75a278a15ffbf1689efad4e76\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-03T07:17:30+00:00",
      "cve": "CVE-2025-37992",
      "id": "CVE-2025-37992",
      "initial_release_date": "2025-05-26T00:00:00+00:00",
      "product_status:known_affected": "260",
      "product_status:known_not_affected": "14",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net_sched: Flush gso_skb list too during -\u003echange()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-37992.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-23T00:07:40Z",
      "cve": "CVE-2025-37992",
      "id": "CVE-2025-37992",
      "initial_release_date": "2025-05-27T01:11:02Z",
      "product_status:known_affected": "683",
      "product_status:known_not_affected": "6",
      "product_status:recommended": "469",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-37992",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-37992.json",
      "version": "42"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.