PT-2025-18433 · Linux+5 · Linux Kernel+5
Published
2025-04-07
·
Updated
2026-05-26
·
CVE-2025-37752
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.14.0-rc2-syzkaller
Description
The issue is related to the Linux kernel's net sched module, specifically the sch sfq component. It is not sufficient to directly validate the limit on the data that the user passes, as it can be updated based on how other parameters are changed. The check has been moved to the end of the configuration update process to catch scenarios where the limit is indirectly updated. This resolves a syzkaller reported crash due to an array-index-out-of-bounds error in net/sched/sch sfq.c.
Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the net sched: sch sfq: move the limit validation vulnerability.
As a temporary workaround, consider restricting access to the vulnerable sch sfq component until a patch is available.
Exploit
Fix
DoS
Improper Validation of Array Index
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu