In the Linux kernel, the following vulnerability has been resolved:
net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called.
First call (with valid attributes) sets dev->num_tc to a non zero value.
Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 17, 2024 | Jun 18, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Dec 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jun 18, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | Jun 18, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-rtUpgrade kernel-docsUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade kernel-source-vanillaUpgrade kernel-preempt-develUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-preemptUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-devel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-amazonUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-armUpgrade kernel-sourceUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade kernel-syms-azureUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-apmUpgrade dtb-freescaleUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatch-devel | Aug 8, 2024 | Jun 18, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-bluefieldUpgrade linux-image-oracleUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-azure-cvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1064-nvidia | Sep 12, 2024 | Jun 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jun 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub