In the Linux kernel, the following vulnerability has been resolved:
schhfsc: make hfscqlen_notify() idempotent
hfscqlennotify() is not idempotent either and not friendly to its callers, like fqcodeldequeue(). Let's make it idempotent to ease qdisctreereduce_backlog() callers' life:
updatevf() decreases cl->clnactive, so we can check whether it is non-zero before calling it.
eltreeremove() always removes RB node cl->elnode, but we can use RBEMPTYNODE() + RBCLEARNODE() to make it safe.
[
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1175c4ad01dbc9c979d099861fa90a754f72059",
"digest": {
"line_hashes": [
"214629076153745013370732226329115407756",
"187375392153806216288454445782033648430",
"15072850813336166075697334009142732917",
"231268340533104745025107088687072882299",
"220838664898025740921518555970029617818",
"244152888221597963279285708589083578245",
"295848327678072850052924776832761566497",
"295192642100263028497742551546261701802"
],
"threshold": 0.9
},
"id": "CVE-2025-38177-001c1f6a"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c",
"function": "eltree_remove"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51eb3b65544c9efd6a1026889ee5fb5aa62da3bb",
"digest": {
"length": 115.0,
"function_hash": "171026308548828292856729872530306479465"
},
"id": "CVE-2025-38177-03ac7bd7"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a5efc95a33bd4fcb879250852828cc58c7862970",
"digest": {
"line_hashes": [
"214629076153745013370732226329115407756",
"187375392153806216288454445782033648430",
"15072850813336166075697334009142732917",
"231268340533104745025107088687072882299",
"220838664898025740921518555970029617818",
"244152888221597963279285708589083578245",
"295848327678072850052924776832761566497",
"295192642100263028497742551546261701802"
],
"threshold": 0.9
},
"id": "CVE-2025-38177-1320c3b0"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c",
"function": "eltree_remove"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a5efc95a33bd4fcb879250852828cc58c7862970",
"digest": {
"length": 115.0,
"function_hash": "171026308548828292856729872530306479465"
},
"id": "CVE-2025-38177-13ac4662"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c",
"function": "eltree_remove"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d06476714d2819b550e0cc39222347e2c8941c9d",
"digest": {
"length": 115.0,
"function_hash": "171026308548828292856729872530306479465"
},
"id": "CVE-2025-38177-185211d3"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c",
"function": "hfsc_qlen_notify"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51eb3b65544c9efd6a1026889ee5fb5aa62da3bb",
"digest": {
"length": 180.0,
"function_hash": "271691576654346889246100858321763902889"
},
"id": "CVE-2025-38177-20abe76f"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51eb3b65544c9efd6a1026889ee5fb5aa62da3bb",
"digest": {
"line_hashes": [
"214629076153745013370732226329115407756",
"187375392153806216288454445782033648430",
"15072850813336166075697334009142732917",
"231268340533104745025107088687072882299",
"220838664898025740921518555970029617818",
"244152888221597963279285708589083578245",
"295848327678072850052924776832761566497",
"295192642100263028497742551546261701802"
],
"threshold": 0.9
},
"id": "CVE-2025-38177-2d8495c7"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c",
"function": "eltree_remove"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9030a91235ae4845ec71902c3e0cecfc9ed1f2df",
"digest": {
"length": 115.0,
"function_hash": "171026308548828292856729872530306479465"
},
"id": "CVE-2025-38177-354140a5"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c",
"function": "hfsc_qlen_notify"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0475c85426b18eccdcb7f9fb58d8f8e9c6c58c87",
"digest": {
"length": 180.0,
"function_hash": "271691576654346889246100858321763902889"
},
"id": "CVE-2025-38177-3bafe478"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c",
"function": "hfsc_qlen_notify"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9030a91235ae4845ec71902c3e0cecfc9ed1f2df",
"digest": {
"length": 180.0,
"function_hash": "271691576654346889246100858321763902889"
},
"id": "CVE-2025-38177-4ce2325d"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c",
"function": "eltree_remove"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72c61ffbeeb8c50f6d4d70c65d3283aa1bac57a7",
"digest": {
"length": 115.0,
"function_hash": "171026308548828292856729872530306479465"
},
"id": "CVE-2025-38177-7f86bda9"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9030a91235ae4845ec71902c3e0cecfc9ed1f2df",
"digest": {
"line_hashes": [
"214629076153745013370732226329115407756",
"187375392153806216288454445782033648430",
"15072850813336166075697334009142732917",
"231268340533104745025107088687072882299",
"220838664898025740921518555970029617818",
"244152888221597963279285708589083578245",
"295848327678072850052924776832761566497",
"295192642100263028497742551546261701802"
],
"threshold": 0.9
},
"id": "CVE-2025-38177-aaaf47d2"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0475c85426b18eccdcb7f9fb58d8f8e9c6c58c87",
"digest": {
"line_hashes": [
"214629076153745013370732226329115407756",
"187375392153806216288454445782033648430",
"15072850813336166075697334009142732917",
"231268340533104745025107088687072882299",
"220838664898025740921518555970029617818",
"244152888221597963279285708589083578245",
"295848327678072850052924776832761566497",
"295192642100263028497742551546261701802"
],
"threshold": 0.9
},
"id": "CVE-2025-38177-ab40fc95"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d06476714d2819b550e0cc39222347e2c8941c9d",
"digest": {
"line_hashes": [
"214629076153745013370732226329115407756",
"187375392153806216288454445782033648430",
"15072850813336166075697334009142732917",
"231268340533104745025107088687072882299",
"220838664898025740921518555970029617818",
"244152888221597963279285708589083578245",
"295848327678072850052924776832761566497",
"295192642100263028497742551546261701802"
],
"threshold": 0.9
},
"id": "CVE-2025-38177-b8ba663b"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72c61ffbeeb8c50f6d4d70c65d3283aa1bac57a7",
"digest": {
"line_hashes": [
"214629076153745013370732226329115407756",
"187375392153806216288454445782033648430",
"15072850813336166075697334009142732917",
"231268340533104745025107088687072882299",
"220838664898025740921518555970029617818",
"244152888221597963279285708589083578245",
"295848327678072850052924776832761566497",
"295192642100263028497742551546261701802"
],
"threshold": 0.9
},
"id": "CVE-2025-38177-bbebaca7"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c",
"function": "hfsc_qlen_notify"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d06476714d2819b550e0cc39222347e2c8941c9d",
"digest": {
"length": 180.0,
"function_hash": "271691576654346889246100858321763902889"
},
"id": "CVE-2025-38177-bc3cb3f1"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c",
"function": "eltree_remove"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0475c85426b18eccdcb7f9fb58d8f8e9c6c58c87",
"digest": {
"length": 115.0,
"function_hash": "171026308548828292856729872530306479465"
},
"id": "CVE-2025-38177-d5b0475c"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c",
"function": "hfsc_qlen_notify"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1175c4ad01dbc9c979d099861fa90a754f72059",
"digest": {
"length": 180.0,
"function_hash": "271691576654346889246100858321763902889"
},
"id": "CVE-2025-38177-e10956fc"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c",
"function": "eltree_remove"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1175c4ad01dbc9c979d099861fa90a754f72059",
"digest": {
"length": 115.0,
"function_hash": "171026308548828292856729872530306479465"
},
"id": "CVE-2025-38177-e1809037"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c",
"function": "hfsc_qlen_notify"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a5efc95a33bd4fcb879250852828cc58c7862970",
"digest": {
"length": 180.0,
"function_hash": "271691576654346889246100858321763902889"
},
"id": "CVE-2025-38177-f9d74564"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/sched/sch_hfsc.c",
"function": "hfsc_qlen_notify"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72c61ffbeeb8c50f6d4d70c65d3283aa1bac57a7",
"digest": {
"length": 180.0,
"function_hash": "271691576654346889246100858321763902889"
},
"id": "CVE-2025-38177-facf42e0"
}
]