CVE-2025-40083
Description
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix null-deref in agg_dequeue To prevent a potential crash in agg_dequeue (net/sched/sch_qfq.c) when cl->qdisc->ops->peek(cl->qdisc) returns NULL, we check the return value before using it, similar to the existing approach in sch_hfsc.c. To avoid code duplication, the following changes are made: 1. Changed qdisc_warn_nonwc(include/net/pkt_sched.h) into a static inline function. 2. Moved qdisc_peek_len from net/sched/sch_hfsc.c to include/net/pkt_sched.h so that sch_qfq can reuse it. 3. Applied qdisc_peek_len in agg_dequeue to avoid crashing.
How to fix
- Linux Linux71d84658a61322e5630c85c5388fc25e4a2d08b2, 99fc137f178797204d36ac860dd8b31e35baa2df, 1bed56f089f09b465420bf23bb32985c305cfc28, 3c2a8994807623c7655ece205667ae2cf74940aa, 6ffa9d66187188e3068b5a3895e6ae1ee34f9199, 6ff8e74c8f8a68ec07ef837b95425dfe900d060f, dd831ac8221e691e9e918585b1003c7071df0379 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 462dbc9101acd38e92eda93c0726857517a24bbd ≤ v < 71d84658a61322e5630c85c5388fc25e4a2d08b2, 462dbc9101acd38e92eda93c0726857517a24bbd ≤ v < 99fc137f178797204d36ac860dd8b31e35baa2df, 462dbc9101acd38e92eda93c0726857517a24bbd ≤ v < 1bed56f089f09b465420bf23bb32985c305cfc28, 462dbc9101acd38e92eda93c0726857517a24bbd ≤ v < 3c2a8994807623c7655ece205667ae2cf74940aa, 462dbc9101acd38e92eda93c0726857517a24bbd ≤ v < 6ffa9d66187188e3068b5a3895e6ae1ee34f9199, 462dbc9101acd38e92eda93c0726857517a24bbd ≤ v < 6ff8e74c8f8a68ec07ef837b95425dfe900d060f, 462dbc9101acd38e92eda93c0726857517a24bbd ≤ v < dd831ac8221e691e9e918585b1003c7071df0379, 3.8 | 71d84658a61322e5630c85c5388fc25e4a2d08b2, 99fc137f178797204d36ac860dd8b31e35baa2df, 1bed56f089f09b465420bf23bb32985c305cfc28, 3c2a8994807623c7655ece205667ae2cf74940aa, 6ffa9d66187188e3068b5a3895e6ae1ee34f9199, 6ff8e74c8f8a68ec07ef837b95425dfe900d060f, dd831ac8221e691e9e918585b1003c7071df0379 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.