Search: CVE-2025-37752

CVE-2025-37752 is a high-severity vulnerability in the Linux kernel's net_sched subsystem, specifically in the sch_sfq (Stochastic Fairness Queueing) module. The issue involves insufficient validation of the 'limit' parameter during configuration updates, which can be indirectly modified through other parameters, leading to an out-of-bounds array access and kernel crash. This flaw was reported by syzkaller and fixed by moving the limit validation to the end of the configuration update process to catch indirect updates. Multiple Linux kernel versions prior to the fixed releases are affected. The vulnerability has a CVSS score of 7.8 and can lead to confidentiality, integrity, and availability impacts. A patch is available and has been incorporated in several Linux kernel releases.