{"id":"DEBIAN-CVE-2025-22061","details":"In the Linux kernel, the following vulnerability has been resolved:  net: airoha: Fix qid report in airoha_tc_get_htb_get_leaf_queue()  Fix the following kernel warning deleting HTB offloaded leafs and/or root HTB qdisc in airoha_eth driver properly reporting qid in airoha_tc_get_htb_get_leaf_queue routine.  $tc qdisc replace dev eth1 root handle 10: htb offload $tc class add dev eth1 arent 10: classid 10:4 htb rate 100mbit ceil 100mbit $tc qdisc replace dev eth1 parent 10:4 handle 4: ets bands 8 \\  quanta 1514 3028 4542 6056 7570 9084 10598 12112 $tc qdisc del dev eth1 root  [   55.827864] ------------[ cut here ]------------ [   55.832493] WARNING: CPU: 3 PID: 2678 at 0xffffffc0798695a4 [   55.956510] CPU: 3 PID: 2678 Comm: tc Tainted: G           O 6.6.71 #0 [   55.963557] Hardware name: Airoha AN7581 Evaluation Board (DT) [   55.969383] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [   55.976344] pc : 0xffffffc0798695a4 [   55.979851] lr : 0xffffffc079869a20 [   55.983358] sp : ffffffc0850536a0 [   55.986665] x29: ffffffc0850536a0 x28: 0000000000000024 x27: 0000000000000001 [   55.993800] x26: 0000000000000000 x25: ffffff8008b19000 x24: ffffff800222e800 [   56.000935] x23: 0000000000000001 x22: 0000000000000000 x21: ffffff8008b19000 [   56.008071] x20: ffffff8002225800 x19: ffffff800379d000 x18: 0000000000000000 [   56.015206] x17: ffffffbf9ea59000 x16: ffffffc080018000 x15: 0000000000000000 [   56.022342] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000001 [   56.029478] x11: ffffffc081471008 x10: ffffffc081575a98 x9 : 0000000000000000 [   56.036614] x8 : ffffffc08167fd40 x7 : ffffffc08069e104 x6 : ffffff8007f86000 [   56.043748] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000001 [   56.050884] x2 : 0000000000000000 x1 : 0000000000000250 x0 : ffffff800222c000 [   56.058020] Call trace: [   56.060459]  0xffffffc0798695a4 [   56.063618]  0xffffffc079869a20 [   56.066777]  __qdisc_destroy+0x40/0xa0 [   56.070528]  qdisc_put+0x54/0x6c [   56.073748]  qdisc_graft+0x41c/0x648 [   56.077324]  tc_get_qdisc+0x168/0x2f8 [   56.080978]  rtnetlink_rcv_msg+0x230/0x330 [   56.085076]  netlink_rcv_skb+0x5c/0x128 [   56.088913]  rtnetlink_rcv+0x14/0x1c [   56.092490]  netlink_unicast+0x1e0/0x2c8 [   56.096413]  netlink_sendmsg+0x198/0x3c8 [   56.100337]  ____sys_sendmsg+0x1c4/0x274 [   56.104261]  ___sys_sendmsg+0x7c/0xc0 [   56.107924]  __sys_sendmsg+0x44/0x98 [   56.111492]  __arm64_sys_sendmsg+0x20/0x28 [   56.115580]  invoke_syscall.constprop.0+0x58/0xfc [   56.120285]  do_el0_svc+0x3c/0xbc [   56.123592]  el0_svc+0x18/0x4c [   56.126647]  el0t_64_sync_handler+0x118/0x124 [   56.131005]  el0t_64_sync+0x150/0x154 [   56.134660] ---[ end trace 0000000000000000 ]---","modified":"2025-12-22T23:03:06.649002Z","published":"2025-04-16T15:15:59.580Z","withdrawn":"2025-12-22T23:03:06.649002Z","upstream":["CVE-2025-22061"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2025-22061"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.12.38-1","6.12.41-1","6.12.43-1","6.12.43-1~bpo12+1","6.12.48-1","6.12.57-1","6.13.10-1~exp1","6.13.11-1~exp1","6.13.2-1~exp1","6.13.3-1~exp1","6.13.4-1~exp1","6.13.5-1~exp1","6.13.6-1~exp1","6.13.7-1~exp1","6.13.8-1~exp1","6.13.9-1~exp1","6.13~rc6-1~exp1","6.13~rc7-1~exp1","6.14.3-1~exp1","6.14.5-1~exp1","6.14.6-1~exp1","6.15-1~exp1","6.15.1-1~exp1","6.15.2-1~exp1","6.15.3-1~exp1","6.15.4-1~exp1","6.15.5-1~exp1","6.15.6-1~exp1","6.15~rc7-1~exp1","6.16-1~exp1","6.16.1-1~exp1","6.16.10-1","6.16.11-1","6.16.12-1","6.16.12-2","6.16.3-1","6.16.3-1~bpo13+1","6.16.5-1","6.16.6-1","6.16.7-1","6.16.8-1","6.16.9-1","6.16~rc7-1~exp1","6.17.2-1~exp1","6.17.5-1~exp1","6.17.6-1","6.17.7-1","6.17.7-2","6.17.8-1","6.18~rc4-1~exp1","6.18~rc4-1~exp2","6.18~rc5-1~exp1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2025-22061.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.16.3-1"}]}],"versions":["6.12.38-1","6.12.41-1","6.12.43-1","6.12.43-1~bpo12+1","6.12.48-1","6.12.57-1","6.13.10-1~exp1","6.13.11-1~exp1","6.13.2-1~exp1","6.13.3-1~exp1","6.13.4-1~exp1","6.13.5-1~exp1","6.13.6-1~exp1","6.13.7-1~exp1","6.13.8-1~exp1","6.13.9-1~exp1","6.13~rc6-1~exp1","6.13~rc7-1~exp1","6.14.3-1~exp1","6.14.5-1~exp1","6.14.6-1~exp1","6.15-1~exp1","6.15.1-1~exp1","6.15.2-1~exp1","6.15.3-1~exp1","6.15.4-1~exp1","6.15.5-1~exp1","6.15.6-1~exp1","6.15~rc7-1~exp1","6.16-1~exp1","6.16.1-1~exp1","6.16.3-1~bpo13+1","6.16~rc7-1~exp1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2025-22061.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}