CVE-2025-38177

Description

In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: make hfsc_qlen_notify() idempotent hfsc_qlen_notify() is not idempotent either and not friendly to its callers, like fq_codel_dequeue(). Let's make it idempotent to ease qdisc_tree_reduce_backlog() callers' life: 1. update_vf() decreases cl->cl_nactive, so we can check whether it is non-zero before calling it. 2. eltree_remove() always removes RB node cl->el_node, but we can use RB_EMPTY_NODE() + RB_CLEAR_NODE() to make it safe.

Reserved 2025-04-16 | Published 2025-07-04 | Updated 2025-07-04 | Assigner Linux

Product status

Default status
unaffected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 0475c85426b18eccdcb7f9fb58d8f8e9c6c58c87
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9030a91235ae4845ec71902c3e0cecfc9ed1f2df
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d06476714d2819b550e0cc39222347e2c8941c9d
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c1175c4ad01dbc9c979d099861fa90a754f72059
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 51eb3b65544c9efd6a1026889ee5fb5aa62da3bb
affected

Default status
affected

6.1.138
unaffected

6.6.90
unaffected

6.12.28
unaffected

6.14.6
unaffected

6.15
unaffected

References

git.kernel.org/...c/0475c85426b18eccdcb7f9fb58d8f8e9c6c58c87

git.kernel.org/...c/9030a91235ae4845ec71902c3e0cecfc9ed1f2df

git.kernel.org/...c/d06476714d2819b550e0cc39222347e2c8941c9d

git.kernel.org/...c/c1175c4ad01dbc9c979d099861fa90a754f72059

git.kernel.org/...c/51eb3b65544c9efd6a1026889ee5fb5aa62da3bb

cve.org (CVE-2025-38177)

nvd.nist.gov (CVE-2025-38177)

Download JSON