In the Linux kernel, the following vulnerability has been resolved:
net/sched: taprio: extend minimum interval restriction to entire cycle too
It is possible for syzbot to side-step the restriction imposed by the blamed commit in the Fixes: tag, because the taprio UAPI permits a cycle-time different from (and potentially shorter than) the sum of entry intervals.
We need one more restriction, which is that the cycle time itself must be larger than N * ETH_ZLEN bit times, where N is the number of schedule entries. This restriction needs to apply regardless of whether the cycle time came from the user or was the implicit, auto-calculated value, so we move the existing "cycle == 0" check outside the "if "(!new->cycle_time)" branch. This way covers both conditions and scenarios.
Add a selftest which illustrates the issue triggered by syzbot.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debugUpgrade libperfUpgrade kernel-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-64k-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-toolsUpgrade kernel-64k-modules-extraUpgrade kernel-headersUpgrade kernel-64kUpgrade kernel-rt-debugUpgrade kernel-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-develUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-tools-libs-devel | Nov 4, 2024 | Jun 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Dec 2, 2024 | Jun 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | Jun 21, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Oct 17, 2024 | Jun 21, 2024 |
| Rocky_linux | — | Upgrade libperfUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade libperf-debuginfoUpgrade rvUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernelUpgrade rtlaUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-uki-virtUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-modules-coreUpgrade perfUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-debug-core | Nov 19, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade dtb-armUpgrade dtb-appleUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-symsUpgrade dtb-amlogicUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade dtb-broadcomUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-develUpgrade kernel-64kbUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade dtb-amazonUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade kernel-64kb-devel | Dec 5, 2025 | Oct 31, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1013-nvidia-lowlatency | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub