PT-2025-22214 · Linux+3 · Linux Kernel+3

Alan

·

Publicado

2025-05-05

·

Atualizado

2026-03-13

·

CVE-2025-37953

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A NULL pointer dereference issue was discovered in the Linux kernel, specifically in the htb next rb node() function after htb deactivate() was called. This occurred due to a regression introduced when making htb qlen notify() idempotent. The issue arises in a scenario where htb dequeue tree() is called, leading to fq codel dequeue(), qdisc tree reduce backlog(), and then htb qlen notify() and htb deactivate(). If htb deactivate() is called again after htb next rb node(), it may trigger a warning. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.
Recommendations To fix the issue, make htb deactivate() idempotent by returning immediately if it has already been called before. Make htb next rb node() safe against ptr==NULL to prevent the NULL pointer dereference. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2025-12128
CVE-2025-37953
DLA-4271-1
DSA-5925-1
ECHO-D63B-6100-1A24
MGASA-2025-0182
MGASA-2025-0183
SUSE-SU-2025:01964-1
SUSE-SU-2025:01965-1
SUSE-SU-2025:01983-1
SUSE-SU-2025:02000-1
SUSE-SU-2025:02254-1
SUSE-SU-2025:02264-1
SUSE-SU-2025:02307-1
SUSE-SU-2025:02308-1
SUSE-SU-2025:02320-1
SUSE-SU-2025:02321-1
SUSE-SU-2025:02322-1
SUSE-SU-2025:02333-1
SUSE-SU-2025:02537-1
SUSE-SU-2025:02923-1
SUSE-SU-2025:20408-1
SUSE-SU-2025:20413-1
SUSE-SU-2025:20419-1
SUSE-SU-2025:20421-1
SUSE-SU-2025:2264-1
SUSE-SU-2025_01964-1
SUSE-SU-2025_01965-1
SUSE-SU-2025_01983-1
SUSE-SU-2025_02000-1
SUSE-SU-2025_02254-1
SUSE-SU-2025_02264-1
SUSE-SU-2025_02307-1
SUSE-SU-2025_02308-1
SUSE-SU-2025_02333-1
SUSE-SU-2025_02537-1

Produtos afetados

Astra Linux
Debian
Linux Kernel
Suse