In the Linux kernel, the following vulnerability has been resolved:
net/sched: taprio: extend minimum interval restriction to entire cycle too
It is possible for syzbot to side-step the restriction imposed by the blamed commit in the Fixes: tag, because the taprio UAPI permits a cycle-time different from (and potentially shorter than) the sum of entry intervals.
We need one more restriction, which is that the cycle time itself must be larger than N * ETH_ZLEN bit times, where N is the number of schedule entries. This restriction needs to apply regardless of whether the cycle time came from the user or was the implicit, auto-calculated value, so we move the existing "cycle == 0" check outside the "if "(!new->cycle_time)" branch. This way covers both conditions and scenarios.
Add a selftest which illustrates the issue triggered by syzbot.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-devel-matchedUpgrade kernel-64kUpgrade python3-perfUpgrade kernel-64k-modulesUpgrade bpftoolUpgrade kernel-modules-coreUpgrade rtlaUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-uki-virtUpgrade rvUpgrade kernel-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-uki-virtUpgrade kernel-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade libperfUpgrade kernel-rtUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-rt-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-rt-develUpgrade kernel-modules | Nov 4, 2024 | Jun 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Dec 2, 2024 | Jun 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | Jun 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Oct 17, 2024 | Jun 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade rvUpgrade kernel-rt-modules-coreUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-debugUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-coreUpgrade kernel-uki-virtUpgrade kernel-tools-libs | Nov 19, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade kernel-azure-extraUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-rtUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kernel-symsUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-rt_debug-develUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade kernel-rt_debugUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade kernel-devel-rtUpgrade kernel-debug-develUpgrade dtb-armUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade dtb-sprdUpgrade dtb-marvellUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade dlm-kmp-default | Dec 5, 2025 | Oct 31, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-raspiUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1013-nvidia | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub