CVE-2024-53164

net: sched: fix ordering of qlen adjustment

MEDIUM
5.5
CVSS Score
Published: December 27, 2024 at 01:38 PM UTC
Updated: October 15, 2026 at 01:19 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch->q.qlen around qdisc_tree_reduce_backlog() need to happen _before_ a call to said function because otherwise it may fail to notify parent qdiscs when the child is about to become empty.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 5.4.2895.11 ≤ v < 5.15.1765.16 ≤ v < 6.1.1225.5 ≤ v < 5.10.2336.2 ≤ v < 6.6.686.7 ≤ v < 6.12.76.136.13 rc1959466588aa7f84ccf79ae36a1d89542eaf9aaec
Vendor states this is fixed in 33db36b3c53d0fda2699ea39ba72bee4de8336e8 (fixed)
Vendor states this is fixed in 44782565e1e6174c94bddfa72ac7267cd09c1648 (fixed)
Vendor states this is fixed in 489422e2befff88a1de52b2acebe7b333bded025 (fixed)
Vendor states this is fixed in 5e473f462a16f1a34e49ea4289a667d2e4f35b52 (fixed)
Vendor states this is fixed in 5eb7de8cd58e73851cd37ff8d0666517d9926948 (fixed)
Vendor states this is fixed in 97e13434b5da8e91bdf965352fad2141d13d72d3 (fixed)
Vendor states this is fixed in e3e54ad9eff8bdaa70f897e5342e34b76109497f (fixed)
Vendor states this is fixed in 4.14 (unaffected)
Vendor states this is fixed in 5.10.233 (unaffected)
Vendor states this is fixed in 5.15.176 (unaffected)
Vendor states this is fixed in 5.4.289 (unaffected)
Vendor states this is fixed in 6.1.122 (unaffected)
Vendor states this is fixed in 6.12.7 (unaffected)
Vendor states this is fixed in 6.13 (unaffected)
Vendor states this is fixed in 6.6.68 (unaffected)

References (10)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/33db36b3c53d0fda2699ea39ba72bee4de8336e8
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/44782565e1e6174c94bddfa72ac7267cd09c1648
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/489422e2befff88a1de52b2acebe7b333bded025
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5e473f462a16f1a34e49ea4289a667d2e4f35b52
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5eb7de8cd58e73851cd37ff8d0666517d9926948
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/97e13434b5da8e91bdf965352fad2141d13d72d3
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e3e54ad9eff8bdaa70f897e5342e34b76109497f
Source: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card