CVE-2025-37932

high

Description

In the Linux kernel, the following vulnerability has been resolved: sch_htb: make htb_qlen_notify() idempotent htb_qlen_notify() always deactivates the HTB class and in fact could trigger a warning if it is already deactivated. Therefore, it is not idempotent and not friendly to its callers, like fq_codel_dequeue(). Let's make it idempotent to ease qdisc_tree_reduce_backlog() callers' life.

References

https://git.kernel.org/stable/c/bbbf5e0f87078b715e7a665d662a2c0e77f044ae

https://git.kernel.org/stable/c/a61f1b5921761fbaf166231418bc1db301e5bf59

https://git.kernel.org/stable/c/73cf6af13153d62f9b76eff422eea79dbc70f15e

https://git.kernel.org/stable/c/5ba8b837b522d7051ef81bacf3d95383ff8edce5

https://git.kernel.org/stable/c/0a188c0e197383683fd093ab1ea6ce9a5869a6ea

Details

Source: Mitre, NVD

Published: 2025-05-20

Updated: 2025-05-21

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.4

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00018