---
id: CVE-2024-53164
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: sched: fix ordering of qlen adjustment

  Changes to sch->q.qlen around qdisc_tree_reduce_backlog() need to happen
  _before_ a call to said function because otherwise…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: sched: fix ordering of qlen adjustment

  Changes to sch->q.qlen around qdisc_tree_reduce_backlog() need to happen
  _before_ a call to said function because otherwise…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - linux_kernel < 5.4.289
  - 'linux_kernel >= 5.5, < 5.10.233'
  - 'linux_kernel >= 5.11, < 5.15.176'
  - 'linux_kernel >= 5.16, < 6.1.122'
  - 'linux_kernel >= 6.2, < 6.6.68'
  - 'linux_kernel >= 6.7, < 6.12.7'
  - linux_kernel = 6.13
patched:
  - linux_kernel 6.12.7
published: '2024-12-27'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:19:14.710'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-53164'
references:
  - url: 'https://git.kernel.org/stable/c/33db36b3c53d0fda2699ea39ba72bee4de8336e8'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/44782565e1e6174c94bddfa72ac7267cd09c1648'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/489422e2befff88a1de52b2acebe7b333bded025'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5e473f462a16f1a34e49ea4289a667d2e4f35b52'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5eb7de8cd58e73851cd37ff8d0666517d9926948'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/97e13434b5da8e91bdf965352fad2141d13d72d3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e3e54ad9eff8bdaa70f897e5342e34b76109497f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
  - cve.org
epss: 0.00271
epssPercentile: 0.19173
ingestedAt: '2026-10-15T03:30:12.771Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: sched: fix ordering of qlen adjustment

Changes to sch->q.qlen around qdisc_tree_reduce_backlog() need to happen
_before_ a call to said function because otherwise it may fail to notify
parent qdiscs when the child is about to become empty.

## Affected

- `linux_kernel < 5.4.289`
- `linux_kernel >= 5.5, < 5.10.233`
- `linux_kernel >= 5.11, < 5.15.176`
- `linux_kernel >= 5.16, < 6.1.122`
- `linux_kernel >= 6.2, < 6.6.68`
- `linux_kernel >= 6.7, < 6.12.7`
- `linux_kernel = 6.13`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.12.7`