CVE-2025-38637

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel's net sched component, specifically the skbprio queueing discipline. In certain conditions, when skbprio is used as a child qdisc under TBF with specific parameters, an assertion fails due to a discrepancy between the parent and child qdisc queue length counters. This discrepancy occurs because TBF sometimes peeks at packets in the child qdisc without dequeuing them when tokens are unavailable, triggering the assertion. The fix removes overly strict assertions in skbprio, which are not necessary.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.