CVE-2024-36974

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called. First call (with valid attributes) sets dev->num_tc to a non zero value. Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen.

• linux linux kernel (>= 5.2 < 5.4.279) • linux linux kernel (>= 5.5 < 5.10.221) • linux linux kernel (>= 5.11 < 5.15.162) • linux linux kernel (>= 5.16 < 6.1.95) • linux linux kernel (>= 6.2 < 6.6.35) • linux linux kernel (>= 6.7 < 6.9.6) • linux linux kernel 6.10