Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2025-37798 Details

Description

In the Linux kernel, the following vulnerability has been resolved: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() After making all ->qlen_notify() callbacks idempotent, now it is safe to remove the check of qlen!=0 from both fq_codel_dequeue() and codel_qdisc_dequeue().

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/2f9761a94bae33d26e6a81b31b36e7d776d93dc1	kernel.org	Patch
https://git.kernel.org/stable/c/342debc12183b51773b3345ba267e9263bdfaaef	kernel.org	Patch
https://git.kernel.org/stable/c/4d55144b12e742404bb3f8fee6038bafbf45619d	kernel.org	Patch
https://git.kernel.org/stable/c/7a742a9506849d1c1aa71e36c89855ceddc7d58e	kernel.org	Patch
https://git.kernel.org/stable/c/829c49b6b2ff45b043739168fd1245e4e1a91a30	kernel.org	Patch
https://git.kernel.org/stable/c/a57fe60ef4cf96bfbb6b58397ec28bdb5a5c6b31	kernel.org	Patch
https://git.kernel.org/stable/c/cc71a757da78dd4aa1b4a9b19cb011833730ccf2	kernel.org	Patch
https://git.kernel.org/stable/c/e73c838c80dccb9e4f19becc11d9f3cb4a27d483	kernel.org	Patch
https://git.kernel.org/stable/c/eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450	kernel.org	Patch
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html	CVE	Issue TrackingThird Party Advisory
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html	CVE	Issue TrackingThird Party Advisory

see all 11 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
linux linux kernel	>= 3.5, < 5.4.297 >= 5.5, < 5.10.241 >= 5.11, < 5.15.190 >= 5.16, < 6.1.135 >= 6.2, < 6.6.88
CPE cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:6.15:rc1:::::: Remediation No remediation found in references.
debian debian linux	11.0
CPE cpe:2.3:o:debian:debian_linux:11.0:::::::* Remediation No remediation found in references.

Change History

7 change records found show changes

Date	Action	Recorded By
Jul 30, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	kernel.org
Nov 6, 2025	Initial Analysis	[email protected]
Nov 3, 2025	CVE Modified	CVE
Nov 3, 2025	CVE Modified	CVE
Aug 28, 2025	CVE Modified	kernel.org
May 2, 2025	New CVE Received	kernel.org