In the Linux kernel, the following vulnerability has been resolved:
codel: remove sch->q.qlen check before qdisctreereduce_backlog()
After making all ->qlennotify() callbacks idempotent, now it is safe to remove the check of qlen!=0 from both fqcodeldequeue() and codelqdisc_dequeue().
[
{
"id": "CVE-2025-37798-0b69d022",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d55144b12e742404bb3f8fee6038bafbf45619d"
},
{
"id": "CVE-2025-37798-0e388fa0",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_fq_codel.c",
"function": "fq_codel_dequeue"
},
"digest": {
"function_hash": "277500121410805835148491832123605099623",
"length": 1088.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450"
},
{
"id": "CVE-2025-37798-0f92c9b2",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f9761a94bae33d26e6a81b31b36e7d776d93dc1"
},
{
"id": "CVE-2025-37798-11fc158b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_codel.c",
"function": "codel_qdisc_dequeue"
},
"digest": {
"function_hash": "236878060480496071770225497253427350244",
"length": 518.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a742a9506849d1c1aa71e36c89855ceddc7d58e"
},
{
"id": "CVE-2025-37798-22cd54c6",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_codel.c",
"function": "codel_qdisc_dequeue"
},
"digest": {
"function_hash": "236878060480496071770225497253427350244",
"length": 518.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e73c838c80dccb9e4f19becc11d9f3cb4a27d483"
},
{
"id": "CVE-2025-37798-2940e0a7",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a57fe60ef4cf96bfbb6b58397ec28bdb5a5c6b31"
},
{
"id": "CVE-2025-37798-2a02514c",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_codel.c",
"function": "codel_qdisc_dequeue"
},
"digest": {
"function_hash": "236878060480496071770225497253427350244",
"length": 518.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@342debc12183b51773b3345ba267e9263bdfaaef"
},
{
"id": "CVE-2025-37798-2a04bdc7",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_fq_codel.c",
"function": "fq_codel_dequeue"
},
"digest": {
"function_hash": "277500121410805835148491832123605099623",
"length": 1088.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a742a9506849d1c1aa71e36c89855ceddc7d58e"
},
{
"id": "CVE-2025-37798-2a29e0ab",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_fq_codel.c",
"function": "fq_codel_dequeue"
},
"digest": {
"function_hash": "277500121410805835148491832123605099623",
"length": 1088.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d55144b12e742404bb3f8fee6038bafbf45619d"
},
{
"id": "CVE-2025-37798-33735546",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e73c838c80dccb9e4f19becc11d9f3cb4a27d483"
},
{
"id": "CVE-2025-37798-3650c1fd",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_fq_codel.c",
"function": "fq_codel_dequeue"
},
"digest": {
"function_hash": "277500121410805835148491832123605099623",
"length": 1088.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e73c838c80dccb9e4f19becc11d9f3cb4a27d483"
},
{
"id": "CVE-2025-37798-37cf0a8b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_fq_codel.c",
"function": "fq_codel_dequeue"
},
"digest": {
"function_hash": "277500121410805835148491832123605099623",
"length": 1088.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc71a757da78dd4aa1b4a9b19cb011833730ccf2"
},
{
"id": "CVE-2025-37798-419b9832",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_codel.c",
"function": "codel_qdisc_dequeue"
},
"digest": {
"function_hash": "236878060480496071770225497253427350244",
"length": 518.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc71a757da78dd4aa1b4a9b19cb011833730ccf2"
},
{
"id": "CVE-2025-37798-43940a63",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_fq_codel.c",
"function": "fq_codel_dequeue"
},
"digest": {
"function_hash": "277500121410805835148491832123605099623",
"length": 1088.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f9761a94bae33d26e6a81b31b36e7d776d93dc1"
},
{
"id": "CVE-2025-37798-48cc9671",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e73c838c80dccb9e4f19becc11d9f3cb4a27d483"
},
{
"id": "CVE-2025-37798-6865ea76",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f9761a94bae33d26e6a81b31b36e7d776d93dc1"
},
{
"id": "CVE-2025-37798-6cf9a38b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_codel.c",
"function": "codel_qdisc_dequeue"
},
"digest": {
"function_hash": "236878060480496071770225497253427350244",
"length": 518.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@829c49b6b2ff45b043739168fd1245e4e1a91a30"
},
{
"id": "CVE-2025-37798-765d91f3",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a57fe60ef4cf96bfbb6b58397ec28bdb5a5c6b31"
},
{
"id": "CVE-2025-37798-7d125337",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_codel.c",
"function": "codel_qdisc_dequeue"
},
"digest": {
"function_hash": "236878060480496071770225497253427350244",
"length": 518.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d55144b12e742404bb3f8fee6038bafbf45619d"
},
{
"id": "CVE-2025-37798-81dd3712",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@829c49b6b2ff45b043739168fd1245e4e1a91a30"
},
{
"id": "CVE-2025-37798-821971b1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc71a757da78dd4aa1b4a9b19cb011833730ccf2"
},
{
"id": "CVE-2025-37798-825c3fbc",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc71a757da78dd4aa1b4a9b19cb011833730ccf2"
},
{
"id": "CVE-2025-37798-84418dcc",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@342debc12183b51773b3345ba267e9263bdfaaef"
},
{
"id": "CVE-2025-37798-90ddfcfc",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450"
},
{
"id": "CVE-2025-37798-936329f5",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_fq_codel.c",
"function": "fq_codel_dequeue"
},
"digest": {
"function_hash": "277500121410805835148491832123605099623",
"length": 1088.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a57fe60ef4cf96bfbb6b58397ec28bdb5a5c6b31"
},
{
"id": "CVE-2025-37798-97fc9cbe",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@342debc12183b51773b3345ba267e9263bdfaaef"
},
{
"id": "CVE-2025-37798-9df34a41",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_codel.c",
"function": "codel_qdisc_dequeue"
},
"digest": {
"function_hash": "236878060480496071770225497253427350244",
"length": 518.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450"
},
{
"id": "CVE-2025-37798-a0755ae1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450"
},
{
"id": "CVE-2025-37798-aaa35475",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_codel.c"
},
"digest": {
"line_hashes": [
"185510761316838207333429395773163413407",
"28407077601832816848033953588919372977",
"85036723055278343731080255861182130136",
"291773644378645543097901327080926317712"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a742a9506849d1c1aa71e36c89855ceddc7d58e"
},
{
"id": "CVE-2025-37798-c793c57a",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_fq_codel.c",
"function": "fq_codel_dequeue"
},
"digest": {
"function_hash": "277500121410805835148491832123605099623",
"length": 1088.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@342debc12183b51773b3345ba267e9263bdfaaef"
},
{
"id": "CVE-2025-37798-cdc78512",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@829c49b6b2ff45b043739168fd1245e4e1a91a30"
},
{
"id": "CVE-2025-37798-d064bff6",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_codel.c",
"function": "codel_qdisc_dequeue"
},
"digest": {
"function_hash": "236878060480496071770225497253427350244",
"length": 518.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a57fe60ef4cf96bfbb6b58397ec28bdb5a5c6b31"
},
{
"id": "CVE-2025-37798-d478382e",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_codel.c",
"function": "codel_qdisc_dequeue"
},
"digest": {
"function_hash": "236878060480496071770225497253427350244",
"length": 518.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f9761a94bae33d26e6a81b31b36e7d776d93dc1"
},
{
"id": "CVE-2025-37798-e081179a",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a742a9506849d1c1aa71e36c89855ceddc7d58e"
},
{
"id": "CVE-2025-37798-eb63efdd",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_fq_codel.c"
},
"digest": {
"line_hashes": [
"235232748896555591235002002151988647234",
"206989185561128578655143422801913240338",
"11133997129865598878995716898175389413",
"250466245658732502364644565705748018029"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d55144b12e742404bb3f8fee6038bafbf45619d"
},
{
"id": "CVE-2025-37798-ee370ad0",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/sched/sch_fq_codel.c",
"function": "fq_codel_dequeue"
},
"digest": {
"function_hash": "277500121410805835148491832123605099623",
"length": 1088.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@829c49b6b2ff45b043739168fd1245e4e1a91a30"
}
]