Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's Hierarchical Token Bucket (HTB) scheduling class has been addressed. The issue arose because the function 'htb_qlen_notify()' was not idempotent; it always deactivated the HTB class, potentially triggering a warning if the class was already deactivated. This behavior was problematic for callers like 'fq_codel_dequeue()'. The function has now been modified to be idempotent, improving compatibility with 'qdisc_tree_reduce_backlog()' callers.
The vulnerability could lead to improper handling of the HTB class state, causing potential warnings and disrupting the expected behavior of queue management functions.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.