Description
In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: make hfsc_qlen_notify() idempotent hfsc_qlen_notify() is not idempotent either and not friendly to its callers, like fq_codel_dequeue(). Let's make it idempotent to ease qdisc_tree_reduce_backlog() callers' life: 1. update_vf() decreases cl->cl_nactive, so we can check whether it is non-zero before calling it. 2. eltree_remove() always removes RB node cl->el_node, but we can use RB_EMPTY_NODE() + RB_CLEAR_NODE() to make it safe.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
959466588aa7f84ccf79ae36a1d89542eaf9aaec to < 9a5fd5c2f4d4afdd5e405083ee53e0789ce76956affected959466588aa7f84ccf79ae36a1d89542eaf9aaec to < 72c61ffbeeb8c50f6d4d70c65d3283aa1bac57a7affected959466588aa7f84ccf79ae36a1d89542eaf9aaec to < a5efc95a33bd4fcb879250852828cc58c7862970affected959466588aa7f84ccf79ae36a1d89542eaf9aaec to < 0475c85426b18eccdcb7f9fb58d8f8e9c6c58c87affected959466588aa7f84ccf79ae36a1d89542eaf9aaec to < 9030a91235ae4845ec71902c3e0cecfc9ed1f2dfaffected959466588aa7f84ccf79ae36a1d89542eaf9aaec to < d06476714d2819b550e0cc39222347e2c8941c9daffected959466588aa7f84ccf79ae36a1d89542eaf9aaec to < c1175c4ad01dbc9c979d099861fa90a754f72059affected959466588aa7f84ccf79ae36a1d89542eaf9aaec to < 51eb3b65544c9efd6a1026889ee5fb5aa62da3bbaffected
Linux Linux
Default version status: affected
4.14affected0 to < 4.14unaffected5.4.297 to ≤ 5.4.*unaffected5.10.241 to ≤ 5.10.*unaffected5.15.190 to ≤ 5.15.*unaffected6.1.138 to ≤ 6.1.*unaffected6.6.90 to ≤ 6.6.*unaffected6.12.28 to ≤ 6.12.*unaffected6.14.6 to ≤ 6.14.*unaffected6.15 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/9a5fd5c2f4d4afdd5e405083ee53e0789ce76956 ↗
- https://git.kernel.org/stable/c/72c61ffbeeb8c50f6d4d70c65d3283aa1bac57a7 ↗
- https://git.kernel.org/stable/c/a5efc95a33bd4fcb879250852828cc58c7862970 ↗
- https://git.kernel.org/stable/c/0475c85426b18eccdcb7f9fb58d8f8e9c6c58c87 ↗
- https://git.kernel.org/stable/c/9030a91235ae4845ec71902c3e0cecfc9ed1f2df ↗
- https://git.kernel.org/stable/c/d06476714d2819b550e0cc39222347e2c8941c9d ↗
- https://git.kernel.org/stable/c/c1175c4ad01dbc9c979d099861fa90a754f72059 ↗
- https://git.kernel.org/stable/c/51eb3b65544c9efd6a1026889ee5fb5aa62da3bb ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html ↗
- https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html ↗