Threats tagged 'ghsa-39cv-hx7c-vjcq'

CVE-2025-37752 is a high-severity vulnerability in the Linux kernel's net_sched subsystem, specifically in the sch_sfq (Stochastic Fairness Queueing) module. The issue arises because the limit parameter validation was insufficiently placed, allowing indirect updates to the limit to bypass checks. This could lead to an out-of-bounds array access and kernel crash. The vulnerability was identified through a syzkaller-reported crash involving an array index out-of-bounds error. The fix involved moving the limit validation to the end of the configuration update process to catch indirect updates.