In the Linux kernel, the following vulnerability has been resolved:
codel: remove sch->q.qlen check before qdisctreereduce_backlog()
After making all ->qlennotify() callbacks idempotent, now it is safe to remove the check of qlen!=0 from both fqcodeldequeue() and codelqdisc_dequeue().
[
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-0b69d022",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d55144b12e742404bb3f8fee6038bafbf45619d",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "185510761316838207333429395773163413407",
                "28407077601832816848033953588919372977",
                "85036723055278343731080255861182130136",
                "291773644378645543097901327080926317712"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "fq_codel_dequeue",
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-0e388fa0",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450",
        "digest": {
            "function_hash": "277500121410805835148491832123605099623",
            "length": 1088.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-0f92c9b2",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f9761a94bae33d26e6a81b31b36e7d776d93dc1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "235232748896555591235002002151988647234",
                "206989185561128578655143422801913240338",
                "11133997129865598878995716898175389413",
                "250466245658732502364644565705748018029"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "codel_qdisc_dequeue",
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-11fc158b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a742a9506849d1c1aa71e36c89855ceddc7d58e",
        "digest": {
            "function_hash": "236878060480496071770225497253427350244",
            "length": 518.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "codel_qdisc_dequeue",
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-22cd54c6",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e73c838c80dccb9e4f19becc11d9f3cb4a27d483",
        "digest": {
            "function_hash": "236878060480496071770225497253427350244",
            "length": 518.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "codel_qdisc_dequeue",
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-2a02514c",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@342debc12183b51773b3345ba267e9263bdfaaef",
        "digest": {
            "function_hash": "236878060480496071770225497253427350244",
            "length": 518.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "fq_codel_dequeue",
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-2a04bdc7",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a742a9506849d1c1aa71e36c89855ceddc7d58e",
        "digest": {
            "function_hash": "277500121410805835148491832123605099623",
            "length": 1088.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "fq_codel_dequeue",
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-2a29e0ab",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d55144b12e742404bb3f8fee6038bafbf45619d",
        "digest": {
            "function_hash": "277500121410805835148491832123605099623",
            "length": 1088.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-33735546",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e73c838c80dccb9e4f19becc11d9f3cb4a27d483",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "185510761316838207333429395773163413407",
                "28407077601832816848033953588919372977",
                "85036723055278343731080255861182130136",
                "291773644378645543097901327080926317712"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "fq_codel_dequeue",
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-3650c1fd",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e73c838c80dccb9e4f19becc11d9f3cb4a27d483",
        "digest": {
            "function_hash": "277500121410805835148491832123605099623",
            "length": 1088.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "fq_codel_dequeue",
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-37cf0a8b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc71a757da78dd4aa1b4a9b19cb011833730ccf2",
        "digest": {
            "function_hash": "277500121410805835148491832123605099623",
            "length": 1088.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "codel_qdisc_dequeue",
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-419b9832",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc71a757da78dd4aa1b4a9b19cb011833730ccf2",
        "digest": {
            "function_hash": "236878060480496071770225497253427350244",
            "length": 518.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "fq_codel_dequeue",
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-43940a63",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f9761a94bae33d26e6a81b31b36e7d776d93dc1",
        "digest": {
            "function_hash": "277500121410805835148491832123605099623",
            "length": 1088.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-48cc9671",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e73c838c80dccb9e4f19becc11d9f3cb4a27d483",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "235232748896555591235002002151988647234",
                "206989185561128578655143422801913240338",
                "11133997129865598878995716898175389413",
                "250466245658732502364644565705748018029"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-6865ea76",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f9761a94bae33d26e6a81b31b36e7d776d93dc1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "185510761316838207333429395773163413407",
                "28407077601832816848033953588919372977",
                "85036723055278343731080255861182130136",
                "291773644378645543097901327080926317712"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "codel_qdisc_dequeue",
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-6cf9a38b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@829c49b6b2ff45b043739168fd1245e4e1a91a30",
        "digest": {
            "function_hash": "236878060480496071770225497253427350244",
            "length": 518.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "codel_qdisc_dequeue",
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-7d125337",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d55144b12e742404bb3f8fee6038bafbf45619d",
        "digest": {
            "function_hash": "236878060480496071770225497253427350244",
            "length": 518.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-81dd3712",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@829c49b6b2ff45b043739168fd1245e4e1a91a30",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "185510761316838207333429395773163413407",
                "28407077601832816848033953588919372977",
                "85036723055278343731080255861182130136",
                "291773644378645543097901327080926317712"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-821971b1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc71a757da78dd4aa1b4a9b19cb011833730ccf2",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "185510761316838207333429395773163413407",
                "28407077601832816848033953588919372977",
                "85036723055278343731080255861182130136",
                "291773644378645543097901327080926317712"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-825c3fbc",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc71a757da78dd4aa1b4a9b19cb011833730ccf2",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "235232748896555591235002002151988647234",
                "206989185561128578655143422801913240338",
                "11133997129865598878995716898175389413",
                "250466245658732502364644565705748018029"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-84418dcc",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@342debc12183b51773b3345ba267e9263bdfaaef",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "185510761316838207333429395773163413407",
                "28407077601832816848033953588919372977",
                "85036723055278343731080255861182130136",
                "291773644378645543097901327080926317712"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-90ddfcfc",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "235232748896555591235002002151988647234",
                "206989185561128578655143422801913240338",
                "11133997129865598878995716898175389413",
                "250466245658732502364644565705748018029"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-97fc9cbe",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@342debc12183b51773b3345ba267e9263bdfaaef",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "235232748896555591235002002151988647234",
                "206989185561128578655143422801913240338",
                "11133997129865598878995716898175389413",
                "250466245658732502364644565705748018029"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "codel_qdisc_dequeue",
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-9df34a41",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450",
        "digest": {
            "function_hash": "236878060480496071770225497253427350244",
            "length": 518.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-a0755ae1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "185510761316838207333429395773163413407",
                "28407077601832816848033953588919372977",
                "85036723055278343731080255861182130136",
                "291773644378645543097901327080926317712"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-aaa35475",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a742a9506849d1c1aa71e36c89855ceddc7d58e",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "185510761316838207333429395773163413407",
                "28407077601832816848033953588919372977",
                "85036723055278343731080255861182130136",
                "291773644378645543097901327080926317712"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "fq_codel_dequeue",
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-c793c57a",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@342debc12183b51773b3345ba267e9263bdfaaef",
        "digest": {
            "function_hash": "277500121410805835148491832123605099623",
            "length": 1088.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-cdc78512",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@829c49b6b2ff45b043739168fd1245e4e1a91a30",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "235232748896555591235002002151988647234",
                "206989185561128578655143422801913240338",
                "11133997129865598878995716898175389413",
                "250466245658732502364644565705748018029"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "codel_qdisc_dequeue",
            "file": "net/sched/sch_codel.c"
        },
        "id": "CVE-2025-37798-d478382e",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f9761a94bae33d26e6a81b31b36e7d776d93dc1",
        "digest": {
            "function_hash": "236878060480496071770225497253427350244",
            "length": 518.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-e081179a",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a742a9506849d1c1aa71e36c89855ceddc7d58e",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "235232748896555591235002002151988647234",
                "206989185561128578655143422801913240338",
                "11133997129865598878995716898175389413",
                "250466245658732502364644565705748018029"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-eb63efdd",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d55144b12e742404bb3f8fee6038bafbf45619d",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "235232748896555591235002002151988647234",
                "206989185561128578655143422801913240338",
                "11133997129865598878995716898175389413",
                "250466245658732502364644565705748018029"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "fq_codel_dequeue",
            "file": "net/sched/sch_fq_codel.c"
        },
        "id": "CVE-2025-37798-ee370ad0",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@829c49b6b2ff45b043739168fd1245e4e1a91a30",
        "digest": {
            "function_hash": "277500121410805835148491832123605099623",
            "length": 1088.0
        },
        "deprecated": false,
        "signature_type": "Function"
    }
]