01 Record

CVE-2025-68325

net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.19% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 9.5% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Deferred. NVD last modified this record on 2026-10-13.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-12-18 15:02Z10 MO AGO
Last updated: 2026-05-23 16:02Z5 MO AGO
Reserved: 2025-12-16
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: ff83718f3bc185569a6d8b2e01b122a67ad0532ff5177a2b57a856a08403e3a3

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxde04ddd2980b48caa8d7e24a7db2742917a8b280 to < a3f4e3de41a3f115db35276c6b186ccbc913934a, 0dacfc5372e314d1219f03e64dde3ab495a5a25e to < 38abf6e931b169ea88d7529b49096f53a5dcf8fe, 710866fc0a64eafcb8bacd91bcb1329eb7e5035f to < fcb91be52eb6e92e00b533ebd7c77fecada537e1, aa12ee1c1bd260943fd6ab556d8635811c332eeb to < d01f0e072dadb02fe10f436b940dd957aff0d7d4, ff57186b2cc39766672c4c0332323933e5faaa88 to < 0b6216f9b3d1c33c76f74511026e5de5385ee520, 15de71d06a400f7fdc15bf377a2552b0ec437cf5 to < 529c284cc2815c8350860e9a31722050fe7117cb, 15de71d06a400f7fdc15bf377a2552b0ec437cf5 to < 3ed6c458530a547ed0c9ea0b02b19bab620be88b, 15de71d06a400f7fdc15bf377a2552b0ec437cf5 to < 9fefc78f7f02d71810776fdeb119a05a946a27cc, 7689ab22de36f8db19095f6bdf11f28cfde92f5c, 62d591dde4defb1333d202410609c4ddeae060b3, 5.10.241 to < 5.10.248, 5.15.190 to < 5.15.198, 6.1.149 to < 6.1.160, 6.6.103 to < 6.6.120, 6.12.44 to < 6.12.63, 5.4.297 to < 5.5, 6.16.4 to < 6.17, 6.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a3f4e3de41a3f115db35276c6b186ccbc913934a
git.kernel.orghttps://git.kernel.org/stable/c/38abf6e931b169ea88d7529b49096f53a5dcf8fe
git.kernel.orghttps://git.kernel.org/stable/c/fcb91be52eb6e92e00b533ebd7c77fecada537e1
git.kernel.orghttps://git.kernel.org/stable/c/d01f0e072dadb02fe10f436b940dd957aff0d7d4
git.kernel.orghttps://git.kernel.org/stable/c/0b6216f9b3d1c33c76f74511026e5de5385ee520
git.kernel.orghttps://git.kernel.org/stable/c/529c284cc2815c8350860e9a31722050fe7117cb
git.kernel.orghttps://git.kernel.org/stable/c/3ed6c458530a547ed0c9ea0b02b19bab620be88b
git.kernel.orghttps://git.kernel.org/stable/c/9fefc78f7f02d71810776fdeb119a05a946a27cc

07 Fixed in

Debian 12

linux
Fixed in 6.1.162-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.63-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.17.13-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.