Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2025-40083

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
29/10/2025
Última modificación:
06/12/2025

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net/sched: sch_qfq: Fix null-deref in agg_dequeue<br /> <br /> To prevent a potential crash in agg_dequeue (net/sched/sch_qfq.c)<br /> when cl-&gt;qdisc-&gt;ops-&gt;peek(cl-&gt;qdisc) returns NULL, we check the return<br /> value before using it, similar to the existing approach in sch_hfsc.c.<br /> <br /> To avoid code duplication, the following changes are made:<br /> <br /> 1. Changed qdisc_warn_nonwc(include/net/pkt_sched.h) into a static<br /> inline function.<br /> <br /> 2. Moved qdisc_peek_len from net/sched/sch_hfsc.c to<br /> include/net/pkt_sched.h so that sch_qfq can reuse it.<br /> <br /> 3. Applied qdisc_peek_len in agg_dequeue to avoid crashing.

Impacto