CVE-2024-36978

Updated: 2026-02-27 03:27:35.036538

Description:

In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multiq: fix possible OOB write in multiq_tune() q->bands will be assigned to qopt->bands to execute subsequent code logic after kmalloc. So the old q->bands should not be used in kmalloc. Otherwise, an out-of-bounds write will occur.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

Ubuntu 16.04 ELS linux 4.4.0 7.8 HIGH Not Vulnerable 2024-09-16 12:25:18
Ubuntu 18.04 ELS linux 4.15.0 7.8 HIGH Not Vulnerable 2024-09-16 12:25:31
Total: 12