VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 19, 2025· Updated Sep 29, 2025

net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing

CVE-2025-38568

Description

In the Linux kernel, the following vulnerability has been resolved:

net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing

TCA_MQPRIO_TC_ENTRY_INDEX is validated using NLA_POLICY_MAX(NLA_U32, TC_QOPT_MAX_QUEUE), which allows the value TC_QOPT_MAX_QUEUE (16). This leads to a 4-byte out-of-bounds stack write in the fp[] array, which only has room for 16 elements (0–15).

Fix this by changing the policy to allow only up to TC_QOPT_MAX_QUEUE - 1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

191

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.