CVE-2025-38278 Details
Description
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback This patch addresses below issues, 1. Active traffic on the leaf node must be stopped before its send queue is reassigned to the parent. This patch resolves the issue by marking the node as 'Inner'. 2. During a system reboot, the interface receives TC_HTB_LEAF_DEL and TC_HTB_LEAF_DEL_LAST callbacks to delete its HTB queues. In the case of TC_HTB_LEAF_DEL_LAST, although the same send queue is reassigned to the parent, the current logic still attempts to update the real number of queues, leadning to below warnings New queues can't be registered after device unregistration. WARNING: CPU: 0 PID: 6475 at net/core/net-sysfs.c:1714 netdev_queue_update_kobjects+0x1e4/0x200
A vulnerability in the Linux kernel's traffic control (TC) handling for the OcteonTX2-PF platform has been addressed. The issue arose in the Hierarchical Token Bucket (HTB) queuing discipline, where active traffic on a leaf node was not properly managed before reassigning its send queue to the parent node. This oversight could disrupt traffic flow. Additionally, during system reboots, the interface would receive callbacks to delete HTB queues. In the case of the TC_HTB_LEAF_DEL_LAST callback, the send queue was reassigned to the parent, but the logic incorrectly tried to update the queue count, leading to warnings about queue registration after device unregistration.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/5df8db01d6a4e9c35a5ba5d7e130d5cecd3ffcb4 | kernel.org | Patch |
| https://git.kernel.org/stable/c/67af4ec948e8ce3ea53a9cf614d01fddf172e56d | kernel.org | Patch |
| https://git.kernel.org/stable/c/ec62c99914a79d84c8de5ba1b94d62f2ed721f2a | kernel.org | Patch |
| https://git.kernel.org/stable/c/f1fca0eae5a0573f226f46c6871260278e7dda12 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.5, < 6.6.94 >= 6.7, < 6.12.34 >= 6.13, < 6.15.3 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 30, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 19, 2025 | Initial Analysis | [email protected] |
| Jul 10, 2025 | New CVE Received | kernel.org |