Race Condition Vulnerability in Linux Kernel's SFQ Perturb Period Handling

CVE-2025-38193

What is CVE-2025-38193?

A vulnerability has been identified in the Linux kernel related to the SFQ (Stochastic Fair Queueing) perturb period. This issue occurs due to inadequate validation of the perturb_period value, allowing for the possibility of triggering a race condition. Specifically, values such as negative integers or excessively large numbers can result in errors, which are indicative of the lack of input validation. The vulnerability underscores the importance of ensuring that perturb_period values are constrained to acceptable ranges to prevent overflow and maintain network scheduling integrity.

References