In the Linux kernel, the following vulnerability has been resolved:
codel: remove sch->q.qlen check before qdisctreereduce_backlog()
After making all ->qlennotify() callbacks idempotent, now it is safe to remove the check of qlen!=0 from both fqcodeldequeue() and codelqdisc_dequeue().
[
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d55144b12e742404bb3f8fee6038bafbf45619d",
"id": "CVE-2025-37798-0b69d022"
},
{
"signature_type": "Function",
"target": {
"function": "fq_codel_dequeue",
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"length": 1088.0,
"function_hash": "277500121410805835148491832123605099623"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450",
"id": "CVE-2025-37798-0e388fa0"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f9761a94bae33d26e6a81b31b36e7d776d93dc1",
"id": "CVE-2025-37798-0f92c9b2"
},
{
"signature_type": "Function",
"target": {
"function": "codel_qdisc_dequeue",
"file": "net/sched/sch_codel.c"
},
"digest": {
"length": 518.0,
"function_hash": "236878060480496071770225497253427350244"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a742a9506849d1c1aa71e36c89855ceddc7d58e",
"id": "CVE-2025-37798-11fc158b"
},
{
"signature_type": "Function",
"target": {
"function": "codel_qdisc_dequeue",
"file": "net/sched/sch_codel.c"
},
"digest": {
"length": 518.0,
"function_hash": "236878060480496071770225497253427350244"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e73c838c80dccb9e4f19becc11d9f3cb4a27d483",
"id": "CVE-2025-37798-22cd54c6"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a57fe60ef4cf96bfbb6b58397ec28bdb5a5c6b31",
"id": "CVE-2025-37798-2940e0a7"
},
{
"signature_type": "Function",
"target": {
"function": "codel_qdisc_dequeue",
"file": "net/sched/sch_codel.c"
},
"digest": {
"length": 518.0,
"function_hash": "236878060480496071770225497253427350244"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@342debc12183b51773b3345ba267e9263bdfaaef",
"id": "CVE-2025-37798-2a02514c"
},
{
"signature_type": "Function",
"target": {
"function": "fq_codel_dequeue",
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"length": 1088.0,
"function_hash": "277500121410805835148491832123605099623"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a742a9506849d1c1aa71e36c89855ceddc7d58e",
"id": "CVE-2025-37798-2a04bdc7"
},
{
"signature_type": "Function",
"target": {
"function": "fq_codel_dequeue",
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"length": 1088.0,
"function_hash": "277500121410805835148491832123605099623"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d55144b12e742404bb3f8fee6038bafbf45619d",
"id": "CVE-2025-37798-2a29e0ab"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e73c838c80dccb9e4f19becc11d9f3cb4a27d483",
"id": "CVE-2025-37798-33735546"
},
{
"signature_type": "Function",
"target": {
"function": "fq_codel_dequeue",
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"length": 1088.0,
"function_hash": "277500121410805835148491832123605099623"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e73c838c80dccb9e4f19becc11d9f3cb4a27d483",
"id": "CVE-2025-37798-3650c1fd"
},
{
"signature_type": "Function",
"target": {
"function": "fq_codel_dequeue",
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"length": 1088.0,
"function_hash": "277500121410805835148491832123605099623"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc71a757da78dd4aa1b4a9b19cb011833730ccf2",
"id": "CVE-2025-37798-37cf0a8b"
},
{
"signature_type": "Function",
"target": {
"function": "codel_qdisc_dequeue",
"file": "net/sched/sch_codel.c"
},
"digest": {
"length": 518.0,
"function_hash": "236878060480496071770225497253427350244"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc71a757da78dd4aa1b4a9b19cb011833730ccf2",
"id": "CVE-2025-37798-419b9832"
},
{
"signature_type": "Function",
"target": {
"function": "fq_codel_dequeue",
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"length": 1088.0,
"function_hash": "277500121410805835148491832123605099623"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f9761a94bae33d26e6a81b31b36e7d776d93dc1",
"id": "CVE-2025-37798-43940a63"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e73c838c80dccb9e4f19becc11d9f3cb4a27d483",
"id": "CVE-2025-37798-48cc9671"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f9761a94bae33d26e6a81b31b36e7d776d93dc1",
"id": "CVE-2025-37798-6865ea76"
},
{
"signature_type": "Function",
"target": {
"function": "codel_qdisc_dequeue",
"file": "net/sched/sch_codel.c"
},
"digest": {
"length": 518.0,
"function_hash": "236878060480496071770225497253427350244"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@829c49b6b2ff45b043739168fd1245e4e1a91a30",
"id": "CVE-2025-37798-6cf9a38b"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a57fe60ef4cf96bfbb6b58397ec28bdb5a5c6b31",
"id": "CVE-2025-37798-765d91f3"
},
{
"signature_type": "Function",
"target": {
"function": "codel_qdisc_dequeue",
"file": "net/sched/sch_codel.c"
},
"digest": {
"length": 518.0,
"function_hash": "236878060480496071770225497253427350244"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d55144b12e742404bb3f8fee6038bafbf45619d",
"id": "CVE-2025-37798-7d125337"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@829c49b6b2ff45b043739168fd1245e4e1a91a30",
"id": "CVE-2025-37798-81dd3712"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc71a757da78dd4aa1b4a9b19cb011833730ccf2",
"id": "CVE-2025-37798-821971b1"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc71a757da78dd4aa1b4a9b19cb011833730ccf2",
"id": "CVE-2025-37798-825c3fbc"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@342debc12183b51773b3345ba267e9263bdfaaef",
"id": "CVE-2025-37798-84418dcc"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450",
"id": "CVE-2025-37798-90ddfcfc"
},
{
"signature_type": "Function",
"target": {
"function": "fq_codel_dequeue",
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"length": 1088.0,
"function_hash": "277500121410805835148491832123605099623"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a57fe60ef4cf96bfbb6b58397ec28bdb5a5c6b31",
"id": "CVE-2025-37798-936329f5"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@342debc12183b51773b3345ba267e9263bdfaaef",
"id": "CVE-2025-37798-97fc9cbe"
},
{
"signature_type": "Function",
"target": {
"function": "codel_qdisc_dequeue",
"file": "net/sched/sch_codel.c"
},
"digest": {
"length": 518.0,
"function_hash": "236878060480496071770225497253427350244"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450",
"id": "CVE-2025-37798-9df34a41"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450",
"id": "CVE-2025-37798-a0755ae1"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a742a9506849d1c1aa71e36c89855ceddc7d58e",
"id": "CVE-2025-37798-aaa35475"
},
{
"signature_type": "Function",
"target": {
"function": "fq_codel_dequeue",
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"length": 1088.0,
"function_hash": "277500121410805835148491832123605099623"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@342debc12183b51773b3345ba267e9263bdfaaef",
"id": "CVE-2025-37798-c793c57a"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@829c49b6b2ff45b043739168fd1245e4e1a91a30",
"id": "CVE-2025-37798-cdc78512"
},
{
"signature_type": "Function",
"target": {
"function": "codel_qdisc_dequeue",
"file": "net/sched/sch_codel.c"
},
"digest": {
"length": 518.0,
"function_hash": "236878060480496071770225497253427350244"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a57fe60ef4cf96bfbb6b58397ec28bdb5a5c6b31",
"id": "CVE-2025-37798-d064bff6"
},
{
"signature_type": "Function",
"target": {
"function": "codel_qdisc_dequeue",
"file": "net/sched/sch_codel.c"
},
"digest": {
"length": 518.0,
"function_hash": "236878060480496071770225497253427350244"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f9761a94bae33d26e6a81b31b36e7d776d93dc1",
"id": "CVE-2025-37798-d478382e"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a742a9506849d1c1aa71e36c89855ceddc7d58e",
"id": "CVE-2025-37798-e081179a"
},
{
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d55144b12e742404bb3f8fee6038bafbf45619d",
"id": "CVE-2025-37798-eb63efdd"
},
{
"signature_type": "Function",
"target": {
"function": "fq_codel_dequeue",
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"length": 1088.0,
"function_hash": "277500121410805835148491832123605099623"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@829c49b6b2ff45b043739168fd1245e4e1a91a30",
"id": "CVE-2025-37798-ee370ad0"
}
]