CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT
In the Linux kernel, the following vulnerability has been resolved:
netsched: Prevent creation of classes with TCHROOT
The function qdisctreereducebacklog() uses TCHROOT as a termination condition when traversing up the qdisc tree to update parent backlog counters. However, if a class is created with classid TCHROOT, the traversal terminates prematurely at this class instead of reaching the actual root qdisc, causing parent statistics to be incorrectly maintained. In case of DRR, this could lead to a crash as reported by Mingi Cho.
Prevent the creation of any Qdisc class with classid TCHROOT (0xFFFFFFFF) across all qdisc types, as suggested by Jamal.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Configuration
Prevent creation of any Qdisc class with classid TC_H_ROOT (0xFFFFFFFF) across all qdisc types (net_sched: prevent creation of classes with TC_H_ROOT).
Linux kernel net_sched (traffic control qdisc/classes) classid TC_H_ROOT (0xFFFFFFFF) = disallow/prevent creation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21971?
CVE-2025-21971 has been classified as a moderate severity vulnerability.
How do I fix CVE-2025-21971?
To fix CVE-2025-21971, you should update your Linux kernel to the latest stable version that includes the patch.
What systems are affected by CVE-2025-21971?
CVE-2025-21971 affects various versions of the Linux kernel.
What are the potential impacts of CVE-2025-21971?
The potential impact of CVE-2025-21971 includes disruptions in class creation within network scheduling in the kernel.
When was CVE-2025-21971 disclosed?
CVE-2025-21971 was disclosed alongside the resolution made to the Linux kernel managing network scheduling.