CVE-2025-38193 net_sched: sch_sfq: reject invalid perturb period

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Addressed in Network Scheduler Component Three vulnerabilities in the network scheduler component have been documented, affecting the handling of gso_skb and perturb period configurations. The vulnerabilities, identified as CVE-2025-38115, CVE-2025-37992, and CVE-2025-38193, were published in mid-2025 and have been addressed in recent updates. 4 sources 46