CVE-2025-37932: sch_htb: make htb_qlen_notify() idempotent

Published May 20, 2025
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

schhtb: make htbqlennotify() idempotent

htbqlennotify() always deactivates the HTB class and in fact could trigger a warning if it is already deactivated. Therefore, it is not idempotent and not friendly to its callers, like fqcodeldequeue().

Let's make it idempotent to ease qdisctreereducebacklog() callers' life.

Affected Software

13 affected componentsFixes available
Linux Linux kernel
Linux Linux kernel<5.4.294
Linux Linux kernel>=5.5<5.10.241
Linux Linux kernel>=5.11<5.15.190
Linux Linux kernel>=5.16<6.1.138
Linux Linux kernel>=6.2<6.6.90
Linux Linux kernel>=6.7<6.12.28
Linux Linux kernel>=6.13<6.14.6
Linux Linux kernel=6.15-rc1
Debian Debian Linux=11.0
Microsoft azl3 kernel 6.6.92.2-1
Microsoft azl3 kernel 6.6.85.1-4
Microsoft cbl2 kernel 5.15.186.1-1

Event History

May 20, 2025
CVE Published
via MITRE·03:21 PM
Data Sourced
via MITRE·03:21 PM
Description
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityAffected Software
Jul 11, 2025
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·07:00 AM
SeverityAffected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverity

Frequently Asked Questions

1

What is the severity of CVE-2025-37932?

CVE-2025-37932 is classified with a medium severity level due to its potential impact on system performance.

2

How do I fix CVE-2025-37932?

To fix CVE-2025-37932, you should update your Linux kernel to the latest version where this vulnerability has been patched.

3

What components are affected by CVE-2025-37932?

CVE-2025-37932 affects the sch_htb module in the Linux Kernel.

4

Is my system vulnerable to CVE-2025-37932?

If you are running an affected version of the Linux Kernel that has not been updated, your system may be vulnerable to CVE-2025-37932.

5

What exploit techniques are associated with CVE-2025-37932?

CVE-2025-37932 may be exploited through denial of service attacks that target the htb_qlen_notify() function.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203