In the Linux kernel, the following vulnerability has been resolved:
net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called.
First call (with valid attributes) sets dev->num_tc to a non zero value.
Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 17, 2024 | Jun 18, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Dec 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jun 18, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Jun 18, 2024 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade kernel-rtUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-preemptUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-preempt-develUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade dtb-amdUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade dtb-renesasUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade cluster-md-kmp-rtUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-default-vdso | Aug 8, 2024 | Jun 18, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-intelUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi2Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-20.04cUpgrade linux-image-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1043-iotUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1132-awsUpgrade linux-image-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic | Sep 12, 2024 | Jun 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jun 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub