https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 02:57:27 +0000 https://cve.radiocsirt.org/vuln/cve-2024-56770 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/sched: netem: account for backlog updates from child qdisc</p> <p>In general, &#39;qlen&#39; of any classful qdisc should keep track of the number of packets that the qdisc itself and all of its children holds. In case of netem, &#39;qlen&#39; only accounts for the packets in its internal tfifo. When netem is used with a child qdisc, the child qdisc can use &#39;qdisc_tree_reduce_backlog&#39; to inform its parent, netem, about created or dropped SKBs. This function updates &#39;qlen&#39; and the backlog statistics of netem, but netem does not account for changes made by a child qdisc. &#39;qlen&#39; then indicates the wrong number of packets in the tfifo. If a child qdisc creates new SKBs during enqueue and informs its parent about this, netem&#39;s &#39;qlen&#39; value is increased. When netem dequeues the newly created SKBs from the child, the &#39;qlen&#39; in netem is not updated. If &#39;qlen&#39; reaches the configured sch-&gt;limit, the enqueue function stops working, even though the tfifo is not full.</p> <p>Reproduce the bug: Ensure that the sender machine has GSO enabled. Configure netem as root qdisc and tbf as its child on the outgoing interface of the machine as follows: $ tc qdisc add dev &lt;oif&gt; root handle 1: netem delay 100ms limit 100 $ tc qdisc add dev &lt;oif&gt; parent 1:0 tbf rate 50Mbit burst 1542 latency 50ms</p> <p>Send bulk TCP traffic out via this interface, e.g., by running an iPerf3 client on the machine. Check the qdisc statistics: $ tc -s qdisc show dev &lt;oif&gt;</p> <p>Statist…</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/sched: netem: account for backlog updates from child qdisc</p> <p>In general, &#39;qlen&#39; of any classful qdisc should keep track of the number of packets that the qdisc itself and all of its children holds. In case of netem, &#39;qlen&#39; only accounts for the packets in its internal tfifo. When netem is used with a child qdisc, the child qdisc can use &#39;qdisc_tree_reduce_backlog&#39; to inform its parent, netem, about created or dropped SKBs. This function updates &#39;qlen&#39; and the backlog statistics of netem, but netem does not account for changes made by a child qdisc. &#39;qlen&#39; then indicates the wrong number of packets in the tfifo. If a child qdisc creates new SKBs during enqueue and informs its parent about this, netem&#39;s &#39;qlen&#39; value is increased. When netem dequeues the newly created SKBs from the child, the &#39;qlen&#39; in netem is not updated. If &#39;qlen&#39; reaches the configured sch-&gt;limit, the enqueue function stops working, even though the tfifo is not full.</p> <p>Reproduce the bug: Ensure that the sender machine has GSO enabled. Configure netem as root qdisc and tbf as its child on the outgoing interface of the machine as follows: $ tc qdisc add dev &lt;oif&gt; root handle 1: netem delay 100ms limit 100 $ tc qdisc add dev &lt;oif&gt; parent 1:0 tbf rate 50Mbit burst 1542 latency 50ms</p> <p>Send bulk TCP traffic out via this interface, e.g., by running an iPerf3 client on the machine. Check the qdisc statistics: $ tc -s qdisc show dev &lt;oif&gt;</p> <p>Statist…</p> https://cve.radiocsirt.org/vuln/cve-2024-56770