NetSight
IP …
high7.8

CVE-2024-36974

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP a…

Impact

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called. First call (with valid attributes) sets dev->num_tc to a non zero value. Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.2 before 5.4.279
from 5.5 before 5.10.221
from 5.11 before 5.15.162
from 5.16 before 6.1.95
from 6.2 before 6.6.35
from 6.7 before 6.9.6

References