High 7.8Published Jun 19, 2024

CVE-2024-36978net: sched: sch_multiq: fix possible OOB write in multiq_tune()

Updated under an hour ago (Oct 27, 2026, 8:10 PM ET)

Does this affect you?

It affects Linux and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multiq: fix possible OOB write in multiq_tune() q->bands will be assigned to qopt->bands to execute subsequent code logic after kmalloc. So the old q->bands should not be used in kmalloc. Otherwise, an out-of-bounds write will occur.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from c2999f7fb05b87da4060e38150c70fa46794d82b before d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d; from c2999f7fb05b87da4060e38150c70fa46794d82b before 52b1aa07cda6a199cd6754d3798c7759023bc70f; from c2999f7fb05b87da4060e38150c70fa46794d82b before 598572c64287aee0b75bbba4e2881496878860f3; from c2999f7fb05b87da4060e38150c70fa46794d82b before 0f208fad86631e005754606c3ec80c0d44a11882; from c2999f7fb05b87da4060e38150c70fa46794d82b before 54c2c171c11a798fe887b3ff72922aa9d1411c1e; from c2999f7fb05b87da4060e38150c70fa46794d82b before d6fb5110e8722bc00748f22caeb650fe4672f129; from c2999f7fb05b87da4060e38150c70fa46794d82b before affc18fdc694190ca7575b9a86632a73b9fe043d	CNA record
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V3.1	CISA ADP
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name)	all versions not affected	CISA ADP
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name)	before V3.1	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.4 before 5.4.279; from 5.5 before 5.10.221; from 5.11 before 5.15.162; from 5.16 before 6.1.95; from 6.2 before 6.6.35; from 6.7 before 6.9.6; 6.10; 6.10	NVD

References

References

https://git.kernel.org/stable/c/d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d	patch
https://git.kernel.org/stable/c/52b1aa07cda6a199cd6754d3798c7759023bc70f	patch
https://git.kernel.org/stable/c/598572c64287aee0b75bbba4e2881496878860f3	patch
https://git.kernel.org/stable/c/0f208fad86631e005754606c3ec80c0d44a11882	patch
https://git.kernel.org/stable/c/54c2c171c11a798fe887b3ff72922aa9d1411c1e	patch
https://git.kernel.org/stable/c/d6fb5110e8722bc00748f22caeb650fe4672f129	patch
https://git.kernel.org/stable/c/affc18fdc694190ca7575b9a86632a73b9fe043d	patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
https://cert-portal.siemens.com/productcert/html/ssa-355557.html
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.