CVE-2025-40083

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s sch qfq scheduler within the agg dequeue function (net/sched/sch qfq.c). A null dereference could occur when cl->qdisc->ops->peek(cl->qdisc) returns NULL, potentially leading to a system crash. The issue was addressed by checking the return value before use, mirroring a similar approach in sch hfsc.c. Changes were made to qdisc warn nonwc and qdisc peek len to avoid code duplication and facilitate the fix.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.