In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan <g1042620637@gmail.com> found that ets_class_from_arg() can index an Out-Of-Bou…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan <g1042620637@gmail.com> found that ets_class_from_arg() can index an Out-Of-Bound class in ets_class_from_arg() when passed clid of 0. The overflow may cause local privilege escalation. [ 18.852298] ------------[ cut here ]------------ [ 18.853271] UBSAN: array-index-out-of-bounds in net/sched/sch_ets.c:93:20 [ 18.853743] index 18446744073709551615 is out of range fo…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/03c56665dab1f4ac844bc156652d50d639093fa5 Patch
- https://git.kernel.org/stable/c/1332c6ed446be787f901ed1064ec6a3c694f028a Patch
- https://git.kernel.org/stable/c/997f6ec4208b23c87daf9f044689685f091826f7 Patch
- https://git.kernel.org/stable/c/bcf0d815e728a3a304b50455b32a3170c16e1eaa Patch
- https://git.kernel.org/stable/c/d62b04fca4340a0d468d7853bd66e511935a18cb Patch
- https://git.kernel.org/stable/c/f4168299e553f17aa2ba4016e77a9c38da40eb1d Patch
- https://git.kernel.org/stable/c/f6b0f05fbfa4044f890e8a348288c0d9a20bd1d0 Patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html
Timeline
- nvd_ingest NVD