CVE-2024-36244

MEDIUM

Linux Kernel 5.4.68-5.4.275 - Denial of Service via Taprio Scheduler Cycle Time

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: extend minimum interval restriction to entire cycle too It is possible for syzbot to side-step the restriction imposed by the blamed commit in the Fixes: tag, because the taprio UAPI permits a cycle-time different from (and potentially shorter than) the sum of entry intervals. We need one more restriction, which is that the cycle time itself must be larger than N * ETH_ZLEN bit times, where N is the number of schedule entries. This restriction needs to apply regardless of whether the cycle time came from the user or was the implicit, auto-calculated value, so we move the existing "cycle == 0" check outside the "if "(!new->cycle_time)" branch. This way covers both conditions and scenarios. Add a selftest which illustrates the issue triggered by syzbot.

Scores

CVSS v3 5.5
EPSS 0.0025
EPSS Percentile 16.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (20)
linux/Kernel 5.9.0 - 6.1.119linux
linux/Kernel 6.2.0 - 6.6.33linux
linux/Kernel 6.7.0 - 6.9.4linux
Linux/Linux < 5.9
Linux/Linux 5.4.68 - 5.5
Linux/Linux 5.8.12 - 5.9
Linux/Linux 5.9
Linux/Linux 6.1.119 - 6.1.*
Linux/Linux 6.10
Linux/Linux 6.6.33 - 6.6.*
... and 10 more
Published Jun 21, 2024
Tracked Since Feb 18, 2026