{"id":"CVE-2025-37798","revision":"9ecc63c2949e4864855f7dfc4bfd6c8d","records":[{"revision":"9ecc63c2949e4864855f7dfc4bfd6c8d","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-37798","aliases":[],"title":"codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncodel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()\n\nAfter making all ->qlen_notify() callbacks idempotent, now it is safe to\nremove the check of qlen!=0 from both fq_codel_dequeue() and\ncodel_qdisc_dequeue().","state":0,"publishedAt":"2025-05-02T14:16:02.623+00:00","modifiedAt":"2026-10-15T21:51:59.989+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/sched/sch_codel.c\",\n                        \"net/sched/sch_fq_codel.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\n                            \"lessThan\": \"7a742a9506849d1c1aa71e36c89855ceddc7d58e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\n                            \"lessThan\": \"cc71a757da78dd4aa1b4a9b19cb011833730ccf2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\n                            \"lessThan\": \"eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\n                            \"lessThan\": \"829c49b6b2ff45b043739168fd1245e4e1a91a30\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\n                            \"lessThan\": \"2f9761a94bae33d26e6a81b31b36e7d776d93dc1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\n                            \"lessThan\": \"4d55144b12e742404bb3f8fee6038bafbf45619d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\n                            \"lessThan\": \"e73c838c80dccb9e4f19becc11d9f3cb4a27d483\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\n                            \"lessThan\": \"a57fe60ef4cf96bfbb6b58397ec28bdb5a5c6b31\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"76e3cc126bb223013a6b9a0e2a51238d1ef2e409\",\n                            \"lessThan\": \"342debc12183b51773b3345ba267e9263bdfaaef\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/sched/sch_codel.c\",\n                        \"net/sched/sch_fq_codel.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3.5\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.5\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.297\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.241\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.190\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.135\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.88\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.24\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.13.12\",\n                            \"lessThanOrEqual\": \"6.13.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.14.3\",\n                            \"lessThanOrEqual\": \"6.14.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.15\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/7a742a9506849d1c1aa71e36c89855ceddc7d58e","https://git.kernel.org/stable/c/cc71a757da78dd4aa1b4a9b19cb011833730ccf2","https://git.kernel.org/stable/c/eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450","https://git.kernel.org/stable/c/829c49b6b2ff45b043739168fd1245e4e1a91a30","https://git.kernel.org/stable/c/2f9761a94bae33d26e6a81b31b36e7d776d93dc1","https://git.kernel.org/stable/c/4d55144b12e742404bb3f8fee6038bafbf45619d","https://git.kernel.org/stable/c/e73c838c80dccb9e4f19becc11d9f3cb4a27d483","https://git.kernel.org/stable/c/a57fe60ef4cf96bfbb6b58397ec28bdb5a5c6b31","https://git.kernel.org/stable/c/342debc12183b51773b3345ba267e9263bdfaaef"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-37798","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-37798","identifiers":["CVE-2025-37798"]},"retained":false,"historicalAffected":[]}],"coverage":[]}