CVE-2024-36974: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called. First call (with valid attributes) sets dev->num_tc to a non zero value. Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen.

Affected products

• Linux Linux Kernel: from 5.2, before 5.4.279 (fixed in 5.4.279); from 5.5, before 5.10.221 (fixed in 5.10.221); from 5.11, before 5.15.162 (fixed in 5.15.162); from 5.16, before 6.1.95 (fixed in 6.1.95); from 6.2, before 6.6.35 (fixed in 6.6.35); from 6.7, before 6.9.6 (fixed in 6.9.6); …

Published 2024-06-18. Last modified 2026-08-04.