CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too
In the Linux kernel, the following vulnerability has been resolved:
net/sched: taprio: extend minimum interval restriction to entire cycle too
It is possible for syzbot to side-step the restriction imposed by the blamed commit in the Fixes: tag, because the taprio UAPI permits a cycle-time different from (and potentially shorter than) the sum of entry intervals.
We need one more restriction, which is that the cycle time itself must be larger than N ETHZLEN bit times, where N is the number of schedule entries. This restriction needs to apply regardless of whether the cycle time came from the user or was the implicit, auto-calculated value, so we move the existing "cycle == 0" check outside the "if "(!new->cycletime)" branch. This way covers both conditions and scenarios.
Add a selftest which illustrates the issue triggered by syzbot.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
net/sched: taprio: extend minimum interval restriction to entire cycle too
The Linux kernel CVE team has assigned CVE-2024-36244 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024062134-CVE-2024-36244-f88f@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36244?
CVE-2024-36244 is classified as a medium severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-36244?
To remediate CVE-2024-36244, you should upgrade to the patched versions of the Linux kernel provided by Red Hat or Debian.
What versions of the Linux kernel are affected by CVE-2024-36244?
CVE-2024-36244 affects multiple versions, including Red Hat kernel versions prior to 6.6.33, 6.9.4, and 6.10, as well as specific Debian versions.
Is there a known exploit for CVE-2024-36244?
As of now, there is no public information confirming an active exploit for CVE-2024-36244.
What components of the Linux kernel does CVE-2024-36244 impact?
CVE-2024-36244 impacts the taprio UAPI component within the Linux kernel networking stack.