Answer in brief
CVE-2025-38568 records a Unknown severity vulnerability in net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | 6.4 | Not reported |
| Linux/Linuxgeneric | >=f62af20bed2d9e824f51cfc97ff01bc261f40e58 <39491e859fd494d0b51adc5c7d54c8a7dcf1d198 || >=f62af20bed2d9e824f51cfc97ff01bc261f40e58 <d00e4125680f7074c4f42ce3c297336f23128e70 || >=f62af20bed2d9e824f51cfc97ff01bc261f40e58 <66fc2ebdd9d5dd6e5a9c7edeace5a61a0ab2cd86 || >=f62af20bed2d9e824f51cfc97ff01bc261f40e58 <f1a9dbcb7d17bf0abb325cdc984957cfabc59693 || >=f62af20bed2d9e824f51cfc97ff01bc261f40e58 <ffd2dc4c6c49ff4f1e5d34e454a6a55608104c17 | 39491e859fd494d0b51adc5c7d54c8a7dcf1d198, d00e4125680f7074c4f42ce3c297336f23128e70, 66fc2ebdd9d5dd6e5a9c7edeace5a61a0ab2cd86, f1a9dbcb7d17bf0abb325cdc984957cfabc59693, ffd2dc4c6c49ff4f1e5d34e454a6a55608104c17 |
Published upstream
Aug 19, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing TCA_MQPRIO_TC_ENTRY_INDEX is validated using NLA_POLICY_MAX(NLA_U32, TC_QOPT_MAX_QUEUE), which allows the value TC_QOPT_MAX_QUEUE (16). This leads to a 4-byte out-of-bounds stack write in the fp[] array, which only has room for 16 elements (0–15). Fix this by changing the policy to allow only up to TC_QOPT_MAX_QUEUE - 1.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2025-38568 records a Unknown severity vulnerability in net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | 6.4 | Not reported |
| Linux/Linuxgeneric | >=f62af20bed2d9e824f51cfc97ff01bc261f40e58 <39491e859fd494d0b51adc5c7d54c8a7dcf1d198 || >=f62af20bed2d9e824f51cfc97ff01bc261f40e58 <d00e4125680f7074c4f42ce3c297336f23128e70 || >=f62af20bed2d9e824f51cfc97ff01bc261f40e58 <66fc2ebdd9d5dd6e5a9c7edeace5a61a0ab2cd86 || >=f62af20bed2d9e824f51cfc97ff01bc261f40e58 <f1a9dbcb7d17bf0abb325cdc984957cfabc59693 || >=f62af20bed2d9e824f51cfc97ff01bc261f40e58 <ffd2dc4c6c49ff4f1e5d34e454a6a55608104c17 | 39491e859fd494d0b51adc5c7d54c8a7dcf1d198, d00e4125680f7074c4f42ce3c297336f23128e70, 66fc2ebdd9d5dd6e5a9c7edeace5a61a0ab2cd86, f1a9dbcb7d17bf0abb325cdc984957cfabc59693, ffd2dc4c6c49ff4f1e5d34e454a6a55608104c17 |
Published upstream
Aug 19, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing TCA_MQPRIO_TC_ENTRY_INDEX is validated using NLA_POLICY_MAX(NLA_U32, TC_QOPT_MAX_QUEUE), which allows the value TC_QOPT_MAX_QUEUE (16). This leads to a 4-byte out-of-bounds stack write in the fp[] array, which only has room for 16 elements (0–15). Fix this by changing the policy to allow only up to TC_QOPT_MAX_QUEUE - 1.
Quoted source text, attributed separately from HOL analysis.