In the Linux kernel, the following vulnerability has been resolved:
net/sched: taprio: extend minimum interval restriction to entire cycle too
It is possible for syzbot to side-step the restriction imposed by the blamed commit in the Fixes: tag, because the taprio UAPI permits a cycle-time different from (and potentially shorter than) the sum of entry intervals.
We need one more restriction, which is that the cycle time itself must be larger than N * ETH_ZLEN bit times, where N is the number of schedule entries. This restriction needs to apply regardless of whether the cycle time came from the user or was the implicit, auto-calculated value, so we move the existing "cycle == 0" check outside the "if "(!new->cycle_time)" branch. This way covers both conditions and scenarios.
Add a selftest which illustrates the issue triggered by syzbot.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debugUpgrade rtlaUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-coreUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-headersUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-develUpgrade kernel-64kUpgrade kernel-rt-debug-coreUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade kernel-docUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade rvUpgrade kernel-64k-debugUpgrade libperfUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-develUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-devel-matched | Nov 4, 2024 | Jun 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 2, 2024 | Jun 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | Jun 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Oct 17, 2024 | Jun 21, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade rvUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade libperfUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernelUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-modules-coreUpgrade kernel-debuginfoUpgrade kernel-uki-virtUpgrade kernel-tools-libsUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modulesUpgrade perf-debuginfoUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvm | Nov 19, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade dtb-appleUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade kernel-azure-livepatch-develUpgrade dtb-caviumUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatchUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade dtb-hisilicon | Dec 5, 2025 | Oct 31, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-virtualUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-45-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-kvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-44-lowlatency | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub