CVE-2025-38087

CVE-2025-38087 is a use-after-free vulnerability found in the Linux kernel's network scheduling (net/sched) module, specifically in the `taprio_dev_notifier` function. The vulnerability occurs because `taprio_dev_notifier()` lacks protection by an RCU (Read-Copy-Update) read-side critical section. This can lead to a race condition with the `advance_sched()` function, resulting in a use-after-free scenario. A patch has been developed to address this vulnerability by adding `rcu_read_lock()` inside the `taprio_dev_notifier()` function. This addition aims to prevent the use-after-free condition.