In the Linux kernel, the following vulnerability has been resolved:
net/sched: taprio: extend minimum interval restriction to entire cycle too
It is possible for syzbot to side-step the restriction imposed by the blamed commit in the Fixes: tag, because the taprio UAPI permits a cycle-time different from (and potentially shorter than) the sum of entry intervals.
We need one more restriction, which is that the cycle time itself must be larger than N * ETH_ZLEN bit times, where N is the number of schedule entries. This restriction needs to apply regardless of whether the cycle time came from the user or was the implicit, auto-calculated value, so we move the existing "cycle == 0" check outside the "if "(!new->cycle_time)" branch. This way covers both conditions and scenarios.
Add a selftest which illustrates the issue triggered by syzbot.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade rvUpgrade kernel-tools-libsUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-64k-coreUpgrade libperfUpgrade kernel-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-64kUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-64k-modulesUpgrade kernel-devel-matchedUpgrade rtlaUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade kernelUpgrade kernel-64k-modules-coreUpgrade kernel-rt-core | Nov 4, 2024 | Jun 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 2, 2024 | Jun 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | Jun 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Oct 17, 2024 | Jun 21, 2024 |
| Rocky_linux | — | Upgrade bpftoolUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-uki-virtUpgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-develUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade libperfUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modules | Nov 19, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade kernel-rt-livepatchUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade dlm-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade dtb-marvellUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kernel-azureUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rt | Dec 5, 2025 | Oct 31, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-45-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-kvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1014-azure | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub