Critical Vulnerability in Linux Kernel: Array Index Out of Bounds in SFQ Implementation
Summary
CVE-2024-57996: In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The current implementation does not work correctly with a limit of 1. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interactions. It is known for its stability, performance, and flexibility. However, it is also susceptible to vulnerabilities that can affect system integrity and security. This specific vulnerability relates to the SFQ (Stochastic Fairness Queueing) implementation, which is responsible for managing packet scheduling in network devices.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the SFQ implementation where a limit of 1 packet is incorrectly handled. This flaw can lead to an array index out-of-bounds error, potentially causing system crashes. The issue arises when the queue length is set to 1, and packets are managed incorrectly, leading to a situation where the kernel attempts to access memory outside the allocated bounds. This vulnerability was reported through syzkaller, a tool for finding bugs in the kernel, and can be exploited under specific conditions, resulting in a denial of service.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid setting the SFQ limit to 1. Instead, configure the SFQ with a higher limit to prevent the crash. For example, use the following command to set a limit of 2: 'tc qdisc add dev dummy0 handle 2: parent 1:10 sfq limit 2'.
Conclusion
The CVE-2024-57996 vulnerability in the Linux kernel's SFQ implementation poses a significant risk, leading to potential system crashes. Users are advised to update their kernels to the latest patched versions to mitigate this risk. Temporary workarounds are available, but updating is the best long-term solution.
See every vulnerability recorded for linux →
FAQ
CVE-2024-57996 is a vulnerability in the Linux kernel's SFQ implementation that can lead to an array index out-of-bounds error, causing system crashes.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If an immediate update is not possible, consider using the provided workaround by avoiding a limit of 1 for the SFQ configuration.
Exploitation of this vulnerability can lead to system crashes and denial of service, impacting the availability of network services.
While the vulnerability affects the Linux kernel, its impact may vary across different distributions depending on the version and configuration.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
