High 7.8Published Jun 18, 2024

CVE-2024-36974net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP

Updated under an hour ago (Oct 27, 2026, 8:50 AM ET)

Does this affect you?

It affects Linux and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called. First call (with valid attributes) sets dev->num_tc to a non zero value. Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from a3d43c0d56f1b94e74963a2fbadfb70126d92213 before c6041e7124464ce7e896ee3f912897ce88a0c4ec; from a3d43c0d56f1b94e74963a2fbadfb70126d92213 before 6db4af09987cc5d5f0136bd46148b0e0460dae5b; from a3d43c0d56f1b94e74963a2fbadfb70126d92213 before d3dde4c217f0c31ab0621912e682b57e677dd923; from a3d43c0d56f1b94e74963a2fbadfb70126d92213 before 0bf6cc96612bd396048f57d63f1ad454a846e39c; from a3d43c0d56f1b94e74963a2fbadfb70126d92213 before 724050ae4b76e4fae05a923cb54101d792cf4404; from a3d43c0d56f1b94e74963a2fbadfb70126d92213 before c37a27a35eadb59286c9092c49c241270c802ae2; from a3d43c0d56f1b94e74963a2fbadfb70126d92213 before f921a58ae20852d188f70842431ce6519c4fdc36	CNA record
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V3.1	CISA ADP
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name)	all versions not affected	CISA ADP
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name)	before V3.1	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.2 before 5.4.279; from 5.5 before 5.10.221; from 5.11 before 5.15.162; from 5.16 before 6.1.95; from 6.2 before 6.6.35; from 6.7 before 6.9.6; 6.10; 6.10	NVD

References

References

https://git.kernel.org/stable/c/c6041e7124464ce7e896ee3f912897ce88a0c4ec	patch
https://git.kernel.org/stable/c/6db4af09987cc5d5f0136bd46148b0e0460dae5b	patch
https://git.kernel.org/stable/c/d3dde4c217f0c31ab0621912e682b57e677dd923	patch
https://git.kernel.org/stable/c/0bf6cc96612bd396048f57d63f1ad454a846e39c	patch
https://git.kernel.org/stable/c/724050ae4b76e4fae05a923cb54101d792cf4404	patch
https://git.kernel.org/stable/c/c37a27a35eadb59286c9092c49c241270c802ae2	patch
https://git.kernel.org/stable/c/f921a58ae20852d188f70842431ce6519c4fdc36	patch
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
https://cert-portal.siemens.com/productcert/html/ssa-355557.html
https://cert-portal.siemens.com/productcert/html/ssa-613116.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.