NetSight
IP …
high7.8

CVE-2023-31436

qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.

Impact

qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.7 before 4.14.314
from 4.15 before 4.19.282
from 4.20 before 5.4.242
from 5.5.0 before 5.10.179
from 5.11 before 5.15.109
from 5.16 before 6.1.26

Weakness classification

CWE-787

References