Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68325

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop In cake_drop(), qdisc_tree_reduce_backlog() is used to update the qlen and backlog of the qdisc hierarchy. Its caller, cake_enqueue(), assumes that the parent qdisc will enqueue the current packet. However, this assumption breaks when cake_enqueue() returns NET_XMIT_CN: the parent qdisc stops enqueuing current packet, leaving the tree qlen/backlog accounting incons
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:67b5dff335da6e265daf328fefa4c15e565038952a8c9b82b200257574a7b331
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/sched/sch_cake.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.17"},{"lessThan":"6.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"semver"},{"lessThan…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8c8b156627f5d5d76906c6a99366531407e6a0e48554be7983dc4679895c2215 · sha256:ff83718f3bc18556… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/sched/sch_cake.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a3f4e3de41a3f115db35276c6b186ccbc913934a","status":"affected","version":"de04ddd2980b48caa8d7e24a7db2742917a8b280","versionType":"git"},{"lessThan":"38abf6e931b169ea88d7529b49096f53a5dcf8fe","status":"affected","version":"0dacfc5372e314d1219f03e64dde3ab495a5a25e","versionType":"git"},{"lessThan":"fcb91be52eb6e92e00b533ebd7c77fecada537e1","status":"affected","version":"710866fc0a64eafcb8bacd91b…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8c8b156627f5d5d76906c6a99366531407e6a0e48554be7983dc4679895c2215 · sha256:ff83718f3bc18556… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/sched/sch_cake.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.17"},{"lessThan":"6.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"semver"},{"lessThan…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8c8b156627f5d5d76906c6a99366531407e6a0e48554be7983dc4679895c2215 · sha256:ff83718f3bc18556… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/sched/sch_cake.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a3f4e3de41a3f115db35276c6b186ccbc913934a","status":"affected","version":"de04ddd2980b48caa8d7e24a7db2742917a8b280","versionType":"git"},{"lessThan":"38abf6e931b169ea88d7529b49096f53a5dcf8fe","status":"affected","version":"0dacfc5372e314d1219f03e64dde3ab495a5a25e","versionType":"git"},{"lessThan":"fcb91be52eb6e92e00b533ebd7c77fecada537e1","status":"affected","version":"710866fc0a64eafcb8bacd91b…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8c8b156627f5d5d76906c6a99366531407e6a0e48554be7983dc4679895c2215 · sha256:ff83718f3bc18556… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0b6216f9b3d1c33c76f74511026e5de5385ee520"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c8b156627f5d5d76906c6a99366531407e6a0e48554be7983dc4679895c2215 · sha256:ff83718f3bc18556… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/38abf6e931b169ea88d7529b49096f53a5dcf8fe"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c8b156627f5d5d76906c6a99366531407e6a0e48554be7983dc4679895c2215 · sha256:ff83718f3bc18556… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/3ed6c458530a547ed0c9ea0b02b19bab620be88b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c8b156627f5d5d76906c6a99366531407e6a0e48554be7983dc4679895c2215 · sha256:ff83718f3bc18556… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/529c284cc2815c8350860e9a31722050fe7117cb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c8b156627f5d5d76906c6a99366531407e6a0e48554be7983dc4679895c2215 · sha256:ff83718f3bc18556… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/9fefc78f7f02d71810776fdeb119a05a946a27cc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c8b156627f5d5d76906c6a99366531407e6a0e48554be7983dc4679895c2215 · sha256:ff83718f3bc18556… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/a3f4e3de41a3f115db35276c6b186ccbc913934a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c8b156627f5d5d76906c6a99366531407e6a0e48554be7983dc4679895c2215 · sha256:ff83718f3bc18556… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/d01f0e072dadb02fe10f436b940dd957aff0d7d4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c8b156627f5d5d76906c6a99366531407e6a0e48554be7983dc4679895c2215 · sha256:ff83718f3bc18556… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/fcb91be52eb6e92e00b533ebd7c77fecada537e1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c8b156627f5d5d76906c6a99366531407e6a0e48554be7983dc4679895c2215 · sha256:ff83718f3bc18556… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer