F5-K000138726: High severity f5 traffix systems signaling delivery controller vulnerability
An out-of-bounds write vulnerability in the Linux kernel's net/sched: schqfq component can be exploited to achieve local privilege escalation. The qfqchangeagg() function in net/sched/schqfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K000138726?
The severity of F5-K000138726 is high due to its potential for local privilege escalation.
How do I fix F5-K000138726?
To fix F5-K000138726, it is recommended to apply the latest security patches provided by F5 for Traffix SDC versions 5.1.0 and 5.2.0.
What component is affected by F5-K000138726?
F5-K000138726 affects the net/sched: sch_qfq component of the Linux kernel.
What type of vulnerability is F5-K000138726?
F5-K000138726 is classified as an out-of-bounds write vulnerability.
Which products are impacted by F5-K000138726?
F5-K000138726 impacts the F5 Traffix Systems Signaling Delivery Controller versions 5.1.0 and 5.2.0.