CVE-2024-53164: net: sched: fix ordering of qlen adjustment
In the Linux kernel, the following vulnerability has been resolved:
net: sched: fix ordering of qlen adjustment
Changes to sch->q.qlen around qdisctreereducebacklog() need to happen before a call to said function because otherwise it may fail to notify parent qdiscs when the child is about to become empty.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
net: sched: fix ordering of qlen adjustment
Changes to sch->q.qlen around qdisctreereducebacklog() need to happen before a call to said function because otherwise it may fail to notify parent qdiscs when the child is about to become empty.
— NVD
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-53164?
The severity of CVE-2024-53164 is considered to be moderate.
How do I fix CVE-2024-53164?
To fix CVE-2024-53164, upgrade to Linux kernel version 6.1.123-1 or 6.12.11-1 or a later version.
Which versions of the Linux kernel are affected by CVE-2024-53164?
CVE-2024-53164 affects Linux kernel versions up to 5.10.226-1 and includes specific earlier versions.
What type of vulnerability is CVE-2024-53164?
CVE-2024-53164 is a scheduling-related vulnerability in the Linux kernel.
Is CVE-2024-53164 present in Debian packages?
Yes, CVE-2024-53164 impacts Debian Linux packages that utilize the affected Linux kernel versions.