CVE-2024-57996

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.0

Description A vulnerability has been identified in the Linux kernel, specifically in the net sched module, where the sch sfq implementation does not work correctly with a limit of 1 packet. This issue can cause an array-index-out-of-bounds error in the sfq head array, leading to a crash. The vulnerability can be triggered by sending two packets in a specific scenario, causing the qdisc qlen to underflow and resulting in an out-of-bounds access.

Recommendations For Linux kernel versions prior to 5.10.0, apply the patch that adds a check to prevent the limit from being set to 1, as this will prevent the array-index-out-of-bounds error and subsequent crash. As a temporary workaround, consider disabling the sfq qdisc until a patch is available.