CVE-2024-53164

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-53164
In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch->q.qlen around qdisc_tree_reduce_backlog() need to happen _before_ a call to said function because otherwise it may fail to notify parent qdiscs when the child is about to become empty.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/33db36b3c53d0fda2699ea39ba72bee4de8336e8 Patch
https://git.kernel.org/stable/c/44782565e1e6174c94bddfa72ac7267cd09c1648 Patch
https://git.kernel.org/stable/c/489422e2befff88a1de52b2acebe7b333bded025 Patch
https://git.kernel.org/stable/c/5e473f462a16f1a34e49ea4289a667d2e4f35b52 Patch
https://git.kernel.org/stable/c/5eb7de8cd58e73851cd37ff8d0666517d9926948 Patch
https://git.kernel.org/stable/c/97e13434b5da8e91bdf965352fad2141d13d72d3 Patch
https://git.kernel.org/stable/c/e3e54ad9eff8bdaa70f897e5342e34b76109497f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
History

08 Oct 2025, 14:41

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/33db36b3c53d0fda2699ea39ba72bee4de8336e8 - () https://git.kernel.org/stable/c/33db36b3c53d0fda2699ea39ba72bee4de8336e8 - Patch
References () https://git.kernel.org/stable/c/44782565e1e6174c94bddfa72ac7267cd09c1648 - () https://git.kernel.org/stable/c/44782565e1e6174c94bddfa72ac7267cd09c1648 - Patch
References () https://git.kernel.org/stable/c/489422e2befff88a1de52b2acebe7b333bded025 - () https://git.kernel.org/stable/c/489422e2befff88a1de52b2acebe7b333bded025 - Patch
References () https://git.kernel.org/stable/c/5e473f462a16f1a34e49ea4289a667d2e4f35b52 - () https://git.kernel.org/stable/c/5e473f462a16f1a34e49ea4289a667d2e4f35b52 - Patch
References () https://git.kernel.org/stable/c/5eb7de8cd58e73851cd37ff8d0666517d9926948 - () https://git.kernel.org/stable/c/5eb7de8cd58e73851cd37ff8d0666517d9926948 - Patch
References () https://git.kernel.org/stable/c/97e13434b5da8e91bdf965352fad2141d13d72d3 - () https://git.kernel.org/stable/c/97e13434b5da8e91bdf965352fad2141d13d72d3 - Patch
References () https://git.kernel.org/stable/c/e3e54ad9eff8bdaa70f897e5342e34b76109497f - () https://git.kernel.org/stable/c/e3e54ad9eff8bdaa70f897e5342e34b76109497f - Patch
CWE NVD-CWE-noinfo
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*

09 Jan 2025, 16:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/33db36b3c53d0fda2699ea39ba72bee4de8336e8 -
  • () https://git.kernel.org/stable/c/44782565e1e6174c94bddfa72ac7267cd09c1648 -
  • () https://git.kernel.org/stable/c/5e473f462a16f1a34e49ea4289a667d2e4f35b52 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: sched: corregir el orden del ajuste de qlen Los cambios en sch->q.qlen en torno a qdisc_tree_reduce_backlog() deben realizarse _antes_ de una llamada a dicha función porque, de lo contrario, puede fallar en notificar a los qdisc principales cuando el secundario está a punto de vaciarse.

27 Dec 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 14:15

Updated : 2025-10-08 14:41

NVD link : CVE-2024-53164

Mitre link : CVE-2024-53164

CVE.ORG link : CVE-2024-53164

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo