01 Record

CVE-2025-37752

net_sched: sch_sfq: move the limit validation

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

net_sched: sch_sfq: move the limit validation

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.30% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 22.8% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-05-01 12:55Z1 YR AGO

Last updated

2026-08-05 11:57Z2 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-129Improper Validation of Array IndexVariant
CWE-787Out-of-bounds WriteBase

Data version

5.2

Document digest

30ca1d3e9b6c9dcfbab3f5064059f64b02223f62bad1f2b60e4c2479760ea8c8

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxe12f6013d0a69660e8b99bfe381b9546ae667328 to < 8fadc871a42933aacb7f1ce9ed9a96485e2c9cf4, 1e6d9d87626cf89eeffb4d943db12cb5b10bf961 to < 7d62ded97db6b7c94c891f704151f372b1ba4688, 1b562b7f9231432da40d12e19786c1bd7df653a7 to < 6c589aa318023690f1606c666a7fb5f4c1c9c219, 35d0137305ae2f97260a9047f445bd4434bd6cc7 to < 1348214fa042a71406964097e743c87a42c85a49, 833e9a1c27b82024db7ff5038a51651f48f05e5e to < d2718324f9e329b10ddc091fba5a0ba2b9d4d96a, 7d8947f2153ee9c5ab4cb17861a11cc45f30e8c4 to < f86293adce0c201cfabb283ef9d6f21292089bb8, 7fefc294204f10a3405f175f4ac2be16d63f135e to < 5e5e1fcc1b8ed57f902c424c5d9b328a3a19073d, 10685681bafce6febb39770f3387621bf5d67d0b to < b36a68192037d1614317a09b0d78c7814e2eecf9, 10685681bafce6febb39770f3387621bf5d67d0b to < b3bf8f63e6179076b57c9de660c9f80b5abefe70, 6.1.129 to < 6.1.135, 6.6.76 to < 6.6.88, 6.12.13 to < 6.12.24, 6.13.2 to < 6.13.12, 6.14—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/8fadc871a42933aacb7f1ce9ed9a96485e2c9cf4
git.kernel.orghttps://git.kernel.org/stable/c/7d62ded97db6b7c94c891f704151f372b1ba4688
git.kernel.orghttps://git.kernel.org/stable/c/6c589aa318023690f1606c666a7fb5f4c1c9c219
git.kernel.orghttps://git.kernel.org/stable/c/1348214fa042a71406964097e743c87a42c85a49
git.kernel.orghttps://git.kernel.org/stable/c/d2718324f9e329b10ddc091fba5a0ba2b9d4d96a
git.kernel.orghttps://git.kernel.org/stable/c/f86293adce0c201cfabb283ef9d6f21292089bb8
git.kernel.orghttps://git.kernel.org/stable/c/5e5e1fcc1b8ed57f902c424c5d9b328a3a19073d
git.kernel.orghttps://git.kernel.org/stable/c/b36a68192037d1614317a09b0d78c7814e2eecf9
git.kernel.orghttps://git.kernel.org/stable/c/b3bf8f63e6179076b57c9de660c9f80b5abefe70
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.135-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.25-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.12.25-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.