CVE-2025-38177 sch_hfsc: make hfsc_qlen_notify() idempotent

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Addressed: Idempotency Improvements in Networking Functions Two vulnerabilities, CVE-2025-37932 and CVE-2025-38177, have been reported in the Microsoft networking stack. The issues pertain to the functions htb_qlen_notify() and hfsc_qlen_notify(), which have been modified to ensure idempotency. Affected systems include those utilizing these specific networking functions. 2 sources 42