Critical Buffer Overflow Vulnerability in Linux Kernel - CVE-2025-37752
Summary
CVE-2025-37752: In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation It is not sufficient to directly validate the limit on the data that the user passes as it can be updated... Affects linux versions < 6.1.135-1. Fixed in 6.1.135-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, managing hardware and system resources. It is known for its stability, performance, and security features. However, vulnerabilities can arise, such as CVE-2025-37752, which affects the scheduling functionality within the kernel, specifically the sch_sfq (Stochastic Fairness Queueing) module. This vulnerability can lead to system crashes and potential denial of service.
Vulnerability Detail
CVE-2025-37752 is a critical vulnerability in the Linux kernel's sch_sfq module, where the limit validation for user-defined parameters is insufficient. This flaw allows for indirect updates to the limit, leading to potential out-of-bounds access. The vulnerability was reported by syzkaller, highlighting a crash scenario where an index exceeds the allocated array size, resulting in a system crash. This issue poses a significant risk as it can be exploited to cause instability in systems relying on the affected scheduling features.
How To Fix
Minimum fixed version
6.1.135-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
CVE-2025-37752 is a significant vulnerability in the Linux kernel that can lead to system instability. It is essential to apply the available patch promptly and monitor your systems for any potential vulnerabilities using tools like Vulert.
See every vulnerability recorded for linux →
FAQ
CVE-2025-37752 is a vulnerability in the Linux kernel's sch_sfq module that can lead to system crashes due to insufficient limit validation.
You can use Vulert, which monitors open-source vulnerabilities in your software. By utilizing the Vulert playground, you can check if your application is affected without needing to sign up.
Exploitation of this vulnerability can lead to system crashes and denial of service, affecting the stability and reliability of the operating system.
Yes, a patch is available in version 6.1.135-1 for Debian 12. Ensure to update your Linux kernel to this version or later.
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to mitigate the risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
