Withdrawn: this CVE is not a vulnerability
The assigning CNA withdrew CVE-2025-38553 on 17 June 2026, and it carries the Rejected state at CVE.org and NVD. It must not be treated as a live finding. Its pre-withdrawal severity, score and exploitability are withheld below; the record itself is kept because withdrawals are reversible and because the reject reason is the correction worth publishing.
WITHDRAWN
CVE-2025-38553
net/sched: Restrict conditions for adding duplicating netems to qdisc tree
Overview
Description
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Details
INFO
Published Date :
Aug. 19, 2025, 6:15 a.m.
Last Modified :
June 17, 2026, 7:16 p.m.
Remotely Exploit :
—
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Impact
Affected Products
The following products are affected by CVE-2025-38553
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
Scoring
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework
for assessing the severity of vulnerabilities in software and systems.
We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2025-38553 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2025-38553 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 17, 2026
Action Type Old Value New Value Changed Description In the Linux kernel, the following vulnerability has been resolved: net/sched: Restrict conditions for adding duplicating netems to qdisc tree netem_enqueue's duplication prevention logic breaks when a netem resides in a qdisc tree with other netems - this can lead to a soft lockup and OOM loop in netem_dequeue, as seen in [1]. Ensure that a duplicating netem cannot exist in a tree with other netems. Previous approaches suggested in discussions in chronological order: 1) Track duplication status or ttl in the sk_buff struct. Considered too specific a use case to extend such a struct, though this would be a resilient fix and address other previous and potential future DOS bugs like the one described in loopy fun [2]. 2) Restrict netem_enqueue recursion depth like in act_mirred with a per cpu variable. However, netem_dequeue can call enqueue on its child, and the depth restriction could be bypassed if the child is a netem. 3) Use the same approach as in 2, but add metadata in netem_skb_cb to handle the netem_dequeue case and track a packet's involvement in duplication. This is an overly complex approach, and Jamal notes that the skb cb can be overwritten to circumvent this safeguard. 4) Prevent the addition of a netem to a qdisc tree if its ancestral path contains a netem. However, filters and actions can cause a packet to change paths when re-enqueued to the root from netem duplication, leading us to the current solution: prevent a duplicating netem from inhabiting the same tree as other netems. [1] https://lore.kernel.org/netdev/8DuRWwfqjoRDLDmBMlIfbrsZg9Gx50DHJc1ilxsEBNe2D6NMoigR_eIRIG0LOjMc3r10nUUZtArXx4oZBIdUfZQrwjcQhdinnMis_0G7VEk=@willsroot.io/ [2] https://lwn.net/Articles/719297/ Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Removed CVSS V3.1 NIST: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Removed CWE NIST: CWE-667 Removed CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.148 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.190 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.241 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.16 up to (excluding) 6.16.1 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.15.10 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.42 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 2.6.13 up to (excluding) 5.4.297 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.102 Removed CPE Configuration OR *cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Removed Reference kernel.org: https://git.kernel.org/stable/c/09317dfb681ac5a96fc69bea0c54441cf91b8270 Removed Reference kernel.org: https://git.kernel.org/stable/c/103c4e27ec9f5fe53022e46e976abf52c7221baf Removed Reference kernel.org: https://git.kernel.org/stable/c/250f8796006c0f2bc638ce545f601d49ae8d528b Removed Reference kernel.org: https://git.kernel.org/stable/c/325f5ec67cc0a77f2d0d453445b9857f1cd06c76 Removed Reference kernel.org: https://git.kernel.org/stable/c/795cb393e38977aa991e70a9363da0ee734b2114 Removed Reference kernel.org: https://git.kernel.org/stable/c/ad340a4b4adb855b18b3666f26ad65c8968e2deb Removed Reference kernel.org: https://git.kernel.org/stable/c/cab2809944989889f88a1a8b5cff1c78460c72cb Removed Reference kernel.org: https://git.kernel.org/stable/c/ec8e0e3d7adef940cdf9475e2352c0680189d14e Removed Reference kernel.org: https://git.kernel.org/stable/c/f088b6ebe8797a3f948d2cae47f34bfb45cc6522 Removed Reference CVE: https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Removed Reference CVE: https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Removed Reference Type kernel.org: https://git.kernel.org/stable/c/09317dfb681ac5a96fc69bea0c54441cf91b8270 Types: Patch Removed Reference Type kernel.org: https://git.kernel.org/stable/c/103c4e27ec9f5fe53022e46e976abf52c7221baf Types: Patch Removed Reference Type kernel.org: https://git.kernel.org/stable/c/250f8796006c0f2bc638ce545f601d49ae8d528b Types: Patch Removed Reference Type kernel.org: https://git.kernel.org/stable/c/325f5ec67cc0a77f2d0d453445b9857f1cd06c76 Types: Patch Removed Reference Type kernel.org: https://git.kernel.org/stable/c/795cb393e38977aa991e70a9363da0ee734b2114 Types: Patch Removed Reference Type kernel.org: https://git.kernel.org/stable/c/ad340a4b4adb855b18b3666f26ad65c8968e2deb Types: Patch Removed Reference Type kernel.org: https://git.kernel.org/stable/c/cab2809944989889f88a1a8b5cff1c78460c72cb Types: Patch Removed Reference Type kernel.org: https://git.kernel.org/stable/c/ec8e0e3d7adef940cdf9475e2352c0680189d14e Types: Patch Removed Reference Type kernel.org: https://git.kernel.org/stable/c/f088b6ebe8797a3f948d2cae47f34bfb45cc6522 Types: Patch Removed Reference Type CVE: https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Types: Mailing List, Third Party Advisory Removed Reference Type CVE: https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Types: Mailing List, Third Party Advisory Removed Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': 'ad340a4b4adb855b18b3666f26ad65c8968e2deb', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': 'f088b6ebe8797a3f948d2cae47f34bfb45cc6522', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': 'cab2809944989889f88a1a8b5cff1c78460c72cb', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': '325f5ec67cc0a77f2d0d453445b9857f1cd06c76', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': '103c4e27ec9f5fe53022e46e976abf52c7221baf', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': '795cb393e38977aa991e70a9363da0ee734b2114', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': '250f8796006c0f2bc638ce545f601d49ae8d528b', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': '09317dfb681ac5a96fc69bea0c54441cf91b8270', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': 'ec8e0e3d7adef940cdf9475e2352c0680189d14e', 'versionType': 'git'}], 'programFiles': ['net/sched/sch_netem.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '2.6.12'}, {'status': 'unaffected', 'version': '0', 'lessThan': '2.6.12', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.4.297', 'versionType': 'semver', 'lessThanOrEqual': '5.4.*'}, {'status': 'unaffected', 'version': '5.10.241', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.190', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.148', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.102', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.42', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.15.10', 'versionType': 'semver', 'lessThanOrEqual': '6.15.*'}, {'status': 'unaffected', 'version': '6.16.1', 'versionType': 'semver', 'lessThanOrEqual': '6.16.*'}, {'status': 'unaffected', 'version': '6.17', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['net/sched/sch_netem.c'], 'defaultStatus': 'affected'}] -
CVE Rejected by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 17, 2026
Action Type Old Value New Value -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': 'ad340a4b4adb855b18b3666f26ad65c8968e2deb', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': 'f088b6ebe8797a3f948d2cae47f34bfb45cc6522', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': 'cab2809944989889f88a1a8b5cff1c78460c72cb', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': '325f5ec67cc0a77f2d0d453445b9857f1cd06c76', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': '103c4e27ec9f5fe53022e46e976abf52c7221baf', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': '795cb393e38977aa991e70a9363da0ee734b2114', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': '250f8796006c0f2bc638ce545f601d49ae8d528b', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': '09317dfb681ac5a96fc69bea0c54441cf91b8270', 'versionType': 'git'}, {'status': 'affected', 'version': '0afb51e72855971dba83b3c6b70c547c2d1161fd', 'lessThan': 'ec8e0e3d7adef940cdf9475e2352c0680189d14e', 'versionType': 'git'}], 'programFiles': ['net/sched/sch_netem.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '2.6.12'}, {'status': 'unaffected', 'version': '0', 'lessThan': '2.6.12', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.4.297', 'versionType': 'semver', 'lessThanOrEqual': '5.4.*'}, {'status': 'unaffected', 'version': '5.10.241', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.190', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.148', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.102', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.42', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.15.10', 'versionType': 'semver', 'lessThanOrEqual': '6.15.*'}, {'status': 'unaffected', 'version': '6.16.1', 'versionType': 'semver', 'lessThanOrEqual': '6.16.*'}, {'status': 'unaffected', 'version': '6.17', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['net/sched/sch_netem.c'], 'defaultStatus': 'affected'}] -
Initial Analysis by [email protected]
Jan. 08, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE CWE-667 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.148 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.190 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.241 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.16 up to (excluding) 6.16.1 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.15.10 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.42 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 2.6.13 up to (excluding) 5.4.297 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.102 Added CPE Configuration OR *cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Added Reference Type kernel.org: https://git.kernel.org/stable/c/09317dfb681ac5a96fc69bea0c54441cf91b8270 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/103c4e27ec9f5fe53022e46e976abf52c7221baf Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/250f8796006c0f2bc638ce545f601d49ae8d528b Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/325f5ec67cc0a77f2d0d453445b9857f1cd06c76 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/795cb393e38977aa991e70a9363da0ee734b2114 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/ad340a4b4adb855b18b3666f26ad65c8968e2deb Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/cab2809944989889f88a1a8b5cff1c78460c72cb Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/ec8e0e3d7adef940cdf9475e2352c0680189d14e Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/f088b6ebe8797a3f948d2cae47f34bfb45cc6522 Types: Patch Added Reference Type CVE: https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Types: Mailing List, Third Party Advisory Added Reference Type CVE: https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Types: Mailing List, Third Party Advisory -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 03, 2025
Action Type Old Value New Value Added Reference https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Added Reference https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 28, 2025
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/ad340a4b4adb855b18b3666f26ad65c8968e2deb Added Reference https://git.kernel.org/stable/c/cab2809944989889f88a1a8b5cff1c78460c72cb Added Reference https://git.kernel.org/stable/c/f088b6ebe8797a3f948d2cae47f34bfb45cc6522 -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 19, 2025
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: net/sched: Restrict conditions for adding duplicating netems to qdisc tree netem_enqueue's duplication prevention logic breaks when a netem resides in a qdisc tree with other netems - this can lead to a soft lockup and OOM loop in netem_dequeue, as seen in [1]. Ensure that a duplicating netem cannot exist in a tree with other netems. Previous approaches suggested in discussions in chronological order: 1) Track duplication status or ttl in the sk_buff struct. Considered too specific a use case to extend such a struct, though this would be a resilient fix and address other previous and potential future DOS bugs like the one described in loopy fun [2]. 2) Restrict netem_enqueue recursion depth like in act_mirred with a per cpu variable. However, netem_dequeue can call enqueue on its child, and the depth restriction could be bypassed if the child is a netem. 3) Use the same approach as in 2, but add metadata in netem_skb_cb to handle the netem_dequeue case and track a packet's involvement in duplication. This is an overly complex approach, and Jamal notes that the skb cb can be overwritten to circumvent this safeguard. 4) Prevent the addition of a netem to a qdisc tree if its ancestral path contains a netem. However, filters and actions can cause a packet to change paths when re-enqueued to the root from netem duplication, leading us to the current solution: prevent a duplicating netem from inhabiting the same tree as other netems. [1] https://lore.kernel.org/netdev/8DuRWwfqjoRDLDmBMlIfbrsZg9Gx50DHJc1ilxsEBNe2D6NMoigR_eIRIG0LOjMc3r10nUUZtArXx4oZBIdUfZQrwjcQhdinnMis_0G7VEk=@willsroot.io/ [2] https://lwn.net/Articles/719297/ Added Reference https://git.kernel.org/stable/c/09317dfb681ac5a96fc69bea0c54441cf91b8270 Added Reference https://git.kernel.org/stable/c/103c4e27ec9f5fe53022e46e976abf52c7221baf Added Reference https://git.kernel.org/stable/c/250f8796006c0f2bc638ce545f601d49ae8d528b Added Reference https://git.kernel.org/stable/c/325f5ec67cc0a77f2d0d453445b9857f1cd06c76 Added Reference https://git.kernel.org/stable/c/795cb393e38977aa991e70a9363da0ee734b2114 Added Reference https://git.kernel.org/stable/c/ec8e0e3d7adef940cdf9475e2352c0680189d14e
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.