CVE-2024-36974
net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Description
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called. First call (with valid attributes) sets dev->num_tc to a non zero value. Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/0bf6cc96612bd396048f57d63f1ad454a846e39c
- https://git.kernel.org/stable/c/6db4af09987cc5d5f0136bd46148b0e0460dae5b
- https://git.kernel.org/stable/c/724050ae4b76e4fae05a923cb54101d792cf4404
- https://git.kernel.org/stable/c/c37a27a35eadb59286c9092c49c241270c802ae2
- https://git.kernel.org/stable/c/c6041e7124464ce7e896ee3f912897ce88a0c4ec
References (10)
SSVC — Action Prioritization
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
Quick Info
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.