7.8 High

CVE-2024-36978 net: sched: sch_multiq: fix possible OOB write in multiq_tune()

Description

In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multiq: fix possible OOB write in multiq_tune() q->bands will be assigned to qopt->bands to execute subsequent code logic after kmalloc. So the old q->bands should not be used in kmalloc. Otherwise, an out-of-bounds write will occur.

CVSS 3.1 detail

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitable with local access to the machine, with an ordinary account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector: Local
Attack complexity: Low
Privileges required: Low
Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Affected products and versions

Product	Affected versions	Fixed in
Linux 6.10	earliest → < 6.10	6.10
Linux 6.9	earliest → < 6.9.6	6.9.6
Linux 6.6	earliest → < 6.6.35	6.6.35
Linux 6.1	earliest → < 6.1.95	6.1.95
Linux 5.15	earliest → < 5.15.162	5.15.162
Linux 5.10	earliest → < 5.10.221	5.10.221
Linux	5.4	5.4.279
RUGGEDCOM RST2428P 3.1	earliest → < 3.1	3.1
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family	Versions not published

Show the 2 other branches

Product	Affected versions	Fixed in
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 3.1	earliest → < 3.1	3.1
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1	earliest → < 1.1.1	1.1.1

References

git.kernel.org git.kernel.org
git.kernel.org git.kernel.org
git.kernel.org git.kernel.org
git.kernel.org git.kernel.org
git.kernel.org git.kernel.org
git.kernel.org git.kernel.org
git.kernel.org git.kernel.org

Timeline

Published June 19, 2024
Last modified November 4, 2026

The 18283 CVEs of Linux →

CVE-2026-99270 In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler() 8.1 High CVE-2026-99269 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before… 7.8 High CVE-2026-99261 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for… Not rated CVE-2026-99260 In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags… Not rated

Track this CVE