CVE-2025-38115

Root cause: In the Linux kernel net_sched, the SFQ qdisc could crash when gso_skb handling inflated sch->q.len and an enqueue on an empty SFQ qdisc was followed by an immediate drop. The fix updates sfq_drop() to properly clear q->tail in that scenario. Affected component: net_sched sch_sfq...

CVE-2025-38115 net_sched: sch_sfq: fix a potential crash on gso_skb handling

In the Linux kernel, the following vulnerability has been resolved: netsched: schsfq: fix a potential crash on gsoskb handling SFQ has an assumption of always being able to queue at least one packet. However, after the blamed commit, sch-q.len can be inflated by packets in sch-gsoskb, and an...

CVE-2025-38115

In the Linux kernel, the following vulnerability has been resolved: netsched: schsfq: fix a potential crash on gsoskb handling SFQ has an assumption of always being able to queue at least one packet. However, after the blamed commit, sch-q.len can be inflated by packets in sch-gsoskb, and an...