CVE-2023-31436

CVSS V2 None CVSS V3 None
Description
qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.
Overview
  • CVE ID
  • CVE-2023-31436
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Received
  • Published Version
  • 2023-04-28T02:15:09
  • Last Modified Date
  • 2023-04-28T02:15:09
References
Reference URL Reference Tags
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.13
https://github.com/torvalds/linux/commit/3037933448f60f9acb705997eae62013ecb81e0d
https://www.spinics.net/lists/stable-commits/msg294885.html
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-31436
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31436
History
Created Old Value New Value Data Type Notes
2023-04-28 03:01:47 Added to TrackCVE