imPC@ndo IT

Tracker / CVE-2023-31436

CVE-2023-31436

High 7.8

qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.

Affected products and versions

linux linux_kernel · 3.7 → 4.14.314
linux linux_kernel · 4.15 → 4.19.282
linux linux_kernel · 4.20 → 5.4.242
linux linux_kernel · 5.11 → 5.15.109
linux linux_kernel · 5.16 → 6.1.26
linux linux_kernel · 5.5.0 → 5.10.179
linux linux_kernel · 6.2 → 6.2.13

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References