Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-68325— net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop

Quick assessment

Affected
Linux Linux
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于sch_cake队列长度计算错误，可能导致空指针取消引用。

AI Predicted 5.5 Difficulty: Moderate EPSS 0.20% · P9

Possible ATT&CK Techniques 1 AI

T1059 · Command and Scripting Interpreter

Affected Version Matrix 27

VendorProduct Version RangeStatus
Linux Linux de04ddd2980b48caa8d7e24a7db2742917a8b280< a3f4e3de41a3f115db35276c6b186ccbc913934a affected
0dacfc5372e314d1219f03e64dde3ab495a5a25e< 38abf6e931b169ea88d7529b49096f53a5dcf8fe affected
710866fc0a64eafcb8bacd91bcb1329eb7e5035f< fcb91be52eb6e92e00b533ebd7c77fecada537e1 affected
aa12ee1c1bd260943fd6ab556d8635811c332eeb< d01f0e072dadb02fe10f436b940dd957aff0d7d4 affected
ff57186b2cc39766672c4c0332323933e5faaa88< 0b6216f9b3d1c33c76f74511026e5de5385ee520 affected
15de71d06a400f7fdc15bf377a2552b0ec437cf5< 529c284cc2815c8350860e9a31722050fe7117cb affected
15de71d06a400f7fdc15bf377a2552b0ec437cf5< 3ed6c458530a547ed0c9ea0b02b19bab620be88b affected
15de71d06a400f7fdc15bf377a2552b0ec437cf5< 9fefc78f7f02d71810776fdeb119a05a946a27cc affected
… +19 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-68325

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop In cake_drop(), qdisc_tree_reduce_backlog() is used to update the qlen and backlog of the qdisc hierarchy. Its caller, cake_enqueue(), assumes that the parent qdisc will enqueue the current packet. However, this assumption breaks when cake_enqueue() returns NET_XMIT_CN: the parent qdisc stops enqueuing current packet, leaving the tree qlen/backlog accounting inconsistent. This mismatch can lead to a NULL dereference (e.g., when the parent Qdisc is qfq_qdisc). This patch computes the qlen/backlog delta in a more robust way by observing the difference before and after the series of cake_drop() calls, and then compensates the qdisc tree accounting if cake_enqueue() returns NET_XMIT_CN. To ensure correct compensation when ACK thinning is enabled, a new variable is introduced to keep qlen unchanged.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于sch_cake队列长度计算错误，可能导致空指针取消引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux de04ddd2980b48caa8d7e24a7db2742917a8b280 ~ a3f4e3de41a3f115db35276c6b186ccbc913934a -
Linux Linux 6.17 -

II. Public POCs for CVE-2025-68325

# POC Description Source Link Shenlong Link
1 PoC CVE-2025-68325 https://github.com/n132/CVE-2025-68325 POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-68325

请登录查看更多情报信息。

Other References for CVE-2025-68325 (4)

Same Patch Batch · Linux · 2025-12-18 · 3 CVEs total

CVE-2025-68323 usb: typec: ucsi: fix use-after-free caused by uec->work
CVE-2025-68324 scsi: imm: Fix use-after-free bug caused by unfinished delayed work

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-68325

No comments yet

Leave a comment