CVE-2023-54251

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc1-00330-g60cc1f7d0605

Description The Linux kernel contained a flaw in the net/sched/sch taprio module where the TCA TAPRIO ATTR SCHED CYCLE TIME attribute was not properly limited to INT MAX. This resulted in a zero division error in the div s64 rem() function when called from get cycle time elapsed(), as the divisor (sched->cycle time) could be zero due to type differences. Specifically, cycle time is an s64, but the argument of div s64 rem() is an s32, allowing a value of 0x100000000 to be cast to 0. This issue was discovered by syzkaller, a kernel fuzzer. The error occurred within the find entry to transmit() function during packet transmission, potentially impacting network performance and stability.

Recommendations Update to Linux kernel version 6.5.0-rc1-00330-g60cc1f7d0605 or a later version that includes the fix.