PT-2025-3317 · Linux+7 · Linux Kernel+7
Published
2024-01-08
·
Updated
2025-10-03
·
CVE-2024-56770
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the Linux kernel's netem qdisc, which fails to account for backlog updates from child qdiscs. Specifically, the
qlen value of netem only accounts for packets in its internal tfifo, but not for packets held by its children. When a child qdisc creates new packets during enqueue and informs netem about this, netem's qlen value is increased, but not updated when netem dequeues these packets. This can cause the qlen value to reach the configured limit, stopping the enqueue function even though the tfifo is not full. The problem can be reproduced by configuring netem as the root qdisc and tbf as its child, and sending bulk TCP traffic. The issue has been fixed by adding a counter for tfifo entries, ensuring that qlen is only decreased when a packet is returned by the dequeue function.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu