Description
In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets The queue limit check in netem_enqueue() uses q->t_len which only counts packets in the internal tfifo. Packets placed in sch->q by the reorder path (__qdisc_enqueue_head) are not counted, allowing the total queue occupancy to exceed sch->limit under reordering. Include sch->q.qlen in the limit check.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
216509dda290f6db92c816dd54b83c1df9da9e76 to < 0f875d52db4c921da610e481b72f03cc82fdcb72affectedc2047b0e216c8edce227d7c42f99ac2877dad0e4 to < ef9a41b3870fb90577da5b2de5bd140022d4021eaffected10df49cfca73dfbbdb6c4150d859f7e8926ae427 to < 74fcd8e127200a50ee22ba2b45c164722bdb9177affected3824c5fad18eeb7abe0c4fc966f29959552dca3e to < 39a66e83ea41fe845631eeb8d326953de27d13f9affected356078a5c55ec8d2061fcc009fb8599f5b0527f9 to < 54b5dbacd00dedffd5e2eed76de1c3839996b5e6affectedf8d4bc455047cf3903cd6f85f49978987dbb3027 to < 8450462eaf91d5d2a9e863507b16d18e814baef3affectedf8d4bc455047cf3903cd6f85f49978987dbb3027 to < 936a7dd87251f6f3e88983350833edf60fe6a80baffectedf8d4bc455047cf3903cd6f85f49978987dbb3027 to < 4185701fcce6b426b6c3630b25330dddd9c47b0daffected83c6ab12f08dcc09d4c5ac86fdb89736b28f1d31affected5.10.232 to < 5.10.258affected5.15.175 to < 5.15.209affected6.1.121 to < 6.1.175affected6.6.67 to < 6.6.141affected6.12.6 to < 6.12.91affected5.4.288 to < 5.5affected
Linux Linux
Default version status: affected
6.13affected0 to < 6.13unaffected5.10.258 to ≤ 5.10.*unaffected5.15.209 to ≤ 5.15.*unaffected6.1.175 to ≤ 6.1.*unaffected6.6.141 to ≤ 6.6.*unaffected6.12.91 to ≤ 6.12.*unaffected6.18.33 to ≤ 6.18.*unaffected7.0.10 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/0f875d52db4c921da610e481b72f03cc82fdcb72 ↗
- https://git.kernel.org/stable/c/ef9a41b3870fb90577da5b2de5bd140022d4021e ↗
- https://git.kernel.org/stable/c/74fcd8e127200a50ee22ba2b45c164722bdb9177 ↗
- https://git.kernel.org/stable/c/39a66e83ea41fe845631eeb8d326953de27d13f9 ↗
- https://git.kernel.org/stable/c/54b5dbacd00dedffd5e2eed76de1c3839996b5e6 ↗
- https://git.kernel.org/stable/c/8450462eaf91d5d2a9e863507b16d18e814baef3 ↗
- https://git.kernel.org/stable/c/936a7dd87251f6f3e88983350833edf60fe6a80b ↗
- https://git.kernel.org/stable/c/4185701fcce6b426b6c3630b25330dddd9c47b0d ↗