CVEvulnerability
CVE-2025-37932
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-05-20
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
In the Linux kernel, the following vulnerability has been resolved:
sch_htb: make htb_qlen_notify() idempotent
htb_qlen_notify() always deactivates the HTB class and in fact could
trigger a warning if it is already deactivated. Therefore, it is not
idempotent and not friendly to its callers, like fq_codel_dequeue().
Let's make it idempotent to ease qdisc_tree_reduce_backlog() callers'
life.
Affected configurations
• linux linux kernel (< 5.4.294)
• linux linux kernel (>= 5.5 < 5.10.241)
• linux linux kernel (>= 5.11 < 5.15.190)
• linux linux kernel (>= 5.16 < 6.1.138)
• linux linux kernel (>= 6.2 < 6.6.90)
• linux linux kernel (>= 6.7 < 6.12.28)
• linux linux kernel (>= 6.13 < 6.14.6)
• linux linux kernel 6.15
• debian debian linux 11.0
References
- https://git.kernel.org/stable/c/0a188c0e197383683fd093ab1ea6ce9a5869a6ea Patch
- https://git.kernel.org/stable/c/32ae12ce6a9f6bace186ca7335220ff59b6cc3cd Patch
- https://git.kernel.org/stable/c/5ba8b837b522d7051ef81bacf3d95383ff8edce5 Patch
- https://git.kernel.org/stable/c/73cf6af13153d62f9b76eff422eea79dbc70f15e Patch
- https://git.kernel.org/stable/c/967955c9e57f8eebfccc298037d4aaf3d42bc1c9 Patch
- https://git.kernel.org/stable/c/a61f1b5921761fbaf166231418bc1db301e5bf59 Patch
- https://git.kernel.org/stable/c/bbbf5e0f87078b715e7a665d662a2c0e77f044ae Patch
- https://git.kernel.org/stable/c/e6b45f4de763b00dc1c55e685e2dd1aaf525d3c1 Patch
- https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Third Party Advisory