Description

In the Linux kernel, the following vulnerability has been resolved:

sch_htb: make htb_qlen_notify() idempotent

htb_qlen_notify() always deactivates the HTB class and in fact could
trigger a warning if it is already deactivated. Therefore, it is not
idempotent and not friendly to its callers, like fq_codel_dequeue().

Let's make it idempotent to ease qdisc_tree_reduce_backlog() callers'
life.

Classification

CVE ID: CVE-2025-37932

Affected Products

Vendor: Linux

Product: Linux

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.06% (probability of being exploited)

EPSS Percentile: 17.55% (scored less or equal to compared to others)

EPSS Date: 2025-06-18 (when was this score calculated)

References

https://nvd.nist.gov/vuln/detail/CVE-2025-37932
https://git.kernel.org/stable/c/73cf6af13153d62f9b76eff422eea79dbc70f15e
https://git.kernel.org/stable/c/bbbf5e0f87078b715e7a665d662a2c0e77f044ae
https://git.kernel.org/stable/c/0a188c0e197383683fd093ab1ea6ce9a5869a6ea
https://git.kernel.org/stable/c/a61f1b5921761fbaf166231418bc1db301e5bf59
https://git.kernel.org/stable/c/5ba8b837b522d7051ef81bacf3d95383ff8edce5

Timeline