In the Linux kernel, the following vulnerability has been resolved:
net/sched: taprio: extend minimum interval restriction to entire cycle too
It is possible for syzbot to side-step the restriction imposed by the blamed commit in the Fixes: tag, because the taprio UAPI permits a cycle-time different from (and potentially shorter than) the sum of entry intervals.
We need one more restriction, which is that the cycle time itself must be larger than N * ETH_ZLEN bit times, where N is the number of schedule entries. This restriction needs to apply regardless of whether the cycle time came from the user or was the implicit, auto-calculated value, so we move the existing "cycle == 0" check outside the "if "(!new->cycle_time)" branch. This way covers both conditions and scenarios.
Add a selftest which illustrates the issue triggered by syzbot.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-toolsUpgrade kernel-64k-develUpgrade kernel-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade libperfUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modulesUpgrade rvUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-64kUpgrade rtlaUpgrade kernel-rt-modules-extra | Nov 4, 2024 | Jun 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Dec 2, 2024 | Jun 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | Jun 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Oct 17, 2024 | Jun 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade rtlaUpgrade python3-perfUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade libperf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade libperf | Nov 19, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-rt_debug-develUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-rt-livepatchUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade dtb-sprdUpgrade dtb-appleUpgrade dtb-marvellUpgrade kernel-devel-rtUpgrade dtb-armUpgrade kernel-debug-develUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade dlm-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-debug-vdso | Dec 5, 2025 | Oct 31, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-gkeUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-virtualUpgrade linux-image-oem-22.04aUpgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-gcpUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04 | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub