PT-2024-26927 · Linux+9 · Linux Kernel+9
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.37
Description
The issue is related to the net/sched: taprio component of the Linux kernel, where the taprio UAPI allows a cycle-time different from the sum of entry intervals. This can be exploited by syzbot, which can side-step the restriction imposed by the blamed commit. To address this, a new restriction is added to ensure the cycle time itself is larger than N * ETH ZLEN bit times, where N is the number of schedule entries. This restriction applies regardless of whether the cycle time came from the user or was the implicit, auto-calculated value.
Recommendations
Update to Linux kernel version 6.6.37 or later to resolve the issue.
As a temporary workaround, consider restricting access to the taprio UAPI to minimize the risk of exploitation.
Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu