CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
In the Linux kernel, the following vulnerability has been resolved:
net/sched: taprio: always validate TCATAPRIOATTRPRIOMAP
If one TCATAPRIOATTRPRIOMAP attribute has been provided, taprioparsemqprioopt() must validate it, or userspace can inject arbitrary data to the kernel, the second time tapriochange() is called.
First call (with valid attributes) sets dev->numtc to a non zero value.
Second call (with arbitrary mqprio attributes) returns early from taprioparsemqprioopt() and bad things can happen.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
net/sched: taprio: always validate TCATAPRIOATTRPRIOMAP
The Linux kernel CVE team has assigned CVE-2024-36974 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024061810-CVE-2024-36974-a482@gregkh/T
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.10
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36974?
CVE-2024-36974 has a high severity rating due to its potential to allow userspace to inject arbitrary data into the kernel.
How do I fix CVE-2024-36974?
To fix CVE-2024-36974, update the Linux kernel to versions 6.10 or the specified remedial versions for Debian listed in the advisory.
What systems are affected by CVE-2024-36974?
CVE-2024-36974 affects the Linux kernel packages from Red Hat and Debian, including specific versions mentioned in the vulnerability description.
What are the potential impacts of CVE-2024-36974?
The potential impacts of CVE-2024-36974 include arbitrary code execution and kernel compromise if exploited.
What component is affected in CVE-2024-36974?
CVE-2024-36974 affects the net/sched component of the Linux kernel, specifically the taprio functionality.