CVE-2025-21971 — Infinite Loop in Linux
CWE-835 — Infinite LoopCWE-703 — Improper Check or Handling of Exceptional Conditions113 documents7 sources
Severity
5.5MEDIUMNVD
OSV8.8OSV7.8OSV7.1OSV6.2OSV5.9
EPSS
0.1%
top 74.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 1
Latest updateNov 21
Description
In the Linux kernel, the following vulnerability has been resolved:
net_sched: Prevent creation of classes with TC_H_ROOT
The function qdisc_tree_reduce_backlog() uses TC_H_ROOT as a termination
condition when traversing up the qdisc tree to update parent backlog
counters. However, if a class is created with classid TC_H_ROOT, the
traversal terminates prematurely at this class instead of reaching the
actual root qdisc, causing parent statistics to be incorrectly maintained.
In case of DRR, thi…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages7 packages
▶CVEListV5linux/linux066a3b5b2346febf9a655b444567b7138e3bb939 — e05d9938b1b0ac40b6054cc5fa0ccbd9afd5ed4c+8