CVE-2025-38177

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
04/07/2025
Last modified:
04/07/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> sch_hfsc: make hfsc_qlen_notify() idempotent<br /> <br /> hfsc_qlen_notify() is not idempotent either and not friendly<br /> to its callers, like fq_codel_dequeue(). Let&amp;#39;s make it idempotent<br /> to ease qdisc_tree_reduce_backlog() callers&amp;#39; life:<br /> <br /> 1. update_vf() decreases cl-&gt;cl_nactive, so we can check whether it is<br /> non-zero before calling it.<br /> <br /> 2. eltree_remove() always removes RB node cl-&gt;el_node, but we can use<br /> RB_EMPTY_NODE() + RB_CLEAR_NODE() to make it safe.

Impact