In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: proper TCATAPRIOTCENTRYINDEX check taprioparsetcentry() is not correctly checking TCATAPRIOTCENTRYINDEX attribute: int tc; // Signed value tc = nlagetu32(tb[TCATAPRIOTCENTRYINDEX]); if (tc >= TCQOPTMAXQUEUE) { NLSETERRMSGMOD(extack, "TC entry index out of range"); return -ERANGE; } syzbot reported that it could fed arbitary negative values: UBSAN: shift-out-of-bounds in net/sched/schtaprio.c:1722:18 shift exponent -2147418108 is negative CPU: 0 PID: 5066 Comm: syz-executor367 Not tainted 6.8.0-rc7-syzkaller-00136-gc8a5c731fd12 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 Call Trace: <TASK> dumpstack lib/dumpstack.c:88 [inline] dumpstacklvl+0x1e7/0x2e0 lib/dumpstack.c:106 ubsanepilogue lib/ubsan.c:217 [inline] _ubsanhandleshiftoutofbounds+0x3c7/0x420 lib/ubsan.c:386 taprioparsetcentry net/sched/schtaprio.c:1722 [inline] taprioparsetcentries net/sched/schtaprio.c:1768 [inline] tapriochange+0xb87/0x57d0 net/sched/schtaprio.c:1877 taprioinit+0x9da/0xc80 net/sched/schtaprio.c:2134 qdisccreate+0x9d4/0x1190 net/sched/schapi.c:1355 tcmodifyqdisc+0xa26/0x1e40 net/sched/schapi.c:1776 rtnetlinkrcvmsg+0x885/0x1040 net/core/rtnetlink.c:6617 netlinkrcvskb+0x1e3/0x430 net/netlink/afnetlink.c:2543 netlinkunicastkernel net/netlink/afnetlink.c:1341 [inline] netlinkunicast+0x7ea/0x980 net/netlink/afnetlink.c:1367 netlinksendmsg+0xa3b/0xd70 net/netlink/afnetlink.c:1908 socksendmsgnosec net/socket.c:730 [inline] _socksendmsg+0x221/0x270 net/socket.c:745 syssendmsg+0x525/0x7d0 net/socket.c:2584 _syssendmsg net/socket.c:2638 [inline] _syssendmsg+0x2b0/0x3a0 net/socket.c:2667 dosyscall64+0xf9/0x240 entrySYSCALL64afterhwframe+0x6f/0x77 RIP: 0033:0x7f1b2dea3759 Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd4de452f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f1b2def0390 RCX: 00007f1b2dea3759 RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 RBP: 0000000000000003 R08: 0000555500000000 R09: 0000555500000000 R10: 0000555500000000 R11: 0000000000000246 R12: 00007ffd4de45340 R13: 00007ffd4de45310 R14: 0000000000000001 R15: 00007ffd4de45340
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.8.0-35-generic", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-buildinfo-6.8.0-35-generic-64k", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-cloud-tools-6.8.0-35", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-cloud-tools-6.8.0-35-generic", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-cloud-tools-common", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-doc", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-headers-6.8.0-35", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-headers-6.8.0-35-generic", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-headers-6.8.0-35-generic-64k", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-image-6.8.0-35-generic", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-image-6.8.0-35-generic-dbgsym", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-image-unsigned-6.8.0-35-generic", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-image-unsigned-6.8.0-35-generic-64k", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-image-unsigned-6.8.0-35-generic-64k-dbgsym", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-image-unsigned-6.8.0-35-generic-dbgsym", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-lib-rust-6.8.0-35-generic", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-libc-dev", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-modules-6.8.0-35-generic", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-modules-6.8.0-35-generic-64k", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-modules-extra-6.8.0-35-generic", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-modules-ipu6-6.8.0-35-generic", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-modules-iwlwifi-6.8.0-35-generic", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-modules-usbio-6.8.0-35-generic", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-source-6.8.0", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-tools-6.8.0-35", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-tools-6.8.0-35-generic", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-tools-6.8.0-35-generic-64k", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-tools-common", "binary_version": "6.8.0-35.35" }, { "binary_name": "linux-tools-host", "binary_version": "6.8.0-35.35" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-aws-cloud-tools-6.8.0-1009", "binary_version": "6.8.0-1009.9" }, { "binary_name": "linux-aws-headers-6.8.0-1009", "binary_version": "6.8.0-1009.9" }, { "binary_name": "linux-aws-tools-6.8.0-1009", "binary_version": "6.8.0-1009.9" }, { "binary_name": "linux-buildinfo-6.8.0-1009-aws", "binary_version": "6.8.0-1009.9" }, { "binary_name": "linux-cloud-tools-6.8.0-1009-aws", "binary_version": "6.8.0-1009.9" }, { "binary_name": "linux-headers-6.8.0-1009-aws", "binary_version": "6.8.0-1009.9" }, { "binary_name": "linux-image-unsigned-6.8.0-1009-aws", "binary_version": "6.8.0-1009.9" }, { "binary_name": "linux-image-unsigned-6.8.0-1009-aws-dbgsym", "binary_version": "6.8.0-1009.9" }, { "binary_name": "linux-modules-6.8.0-1009-aws", "binary_version": "6.8.0-1009.9" }, { "binary_name": "linux-modules-extra-6.8.0-1009-aws", "binary_version": "6.8.0-1009.9" }, { "binary_name": "linux-tools-6.8.0-1009-aws", "binary_version": "6.8.0-1009.9" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-azure-cloud-tools-6.8.0-1008", "binary_version": "6.8.0-1008.8" }, { "binary_name": "linux-azure-headers-6.8.0-1008", "binary_version": "6.8.0-1008.8" }, { "binary_name": "linux-azure-tools-6.8.0-1008", "binary_version": "6.8.0-1008.8" }, { "binary_name": "linux-buildinfo-6.8.0-1008-azure", "binary_version": "6.8.0-1008.8" }, { "binary_name": "linux-cloud-tools-6.8.0-1008-azure", "binary_version": "6.8.0-1008.8" }, { "binary_name": "linux-headers-6.8.0-1008-azure", "binary_version": "6.8.0-1008.8" }, { "binary_name": "linux-image-unsigned-6.8.0-1008-azure", "binary_version": "6.8.0-1008.8" }, { "binary_name": "linux-image-unsigned-6.8.0-1008-azure-dbgsym", "binary_version": "6.8.0-1008.8" }, { "binary_name": "linux-modules-6.8.0-1008-azure", "binary_version": "6.8.0-1008.8" }, { "binary_name": "linux-modules-extra-6.8.0-1008-azure", "binary_version": "6.8.0-1008.8" }, { "binary_name": "linux-modules-iwlwifi-6.8.0-1008-azure", "binary_version": "6.8.0-1008.8" }, { "binary_name": "linux-tools-6.8.0-1008-azure", "binary_version": "6.8.0-1008.8" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.8.0-1008-gcp", "binary_version": "6.8.0-1008.9" }, { "binary_name": "linux-gcp-headers-6.8.0-1008", "binary_version": "6.8.0-1008.9" }, { "binary_name": "linux-gcp-tools-6.8.0-1008", "binary_version": "6.8.0-1008.9" }, { "binary_name": "linux-headers-6.8.0-1008-gcp", "binary_version": "6.8.0-1008.9" }, { "binary_name": "linux-image-unsigned-6.8.0-1008-gcp", "binary_version": "6.8.0-1008.9" }, { "binary_name": "linux-image-unsigned-6.8.0-1008-gcp-dbgsym", "binary_version": "6.8.0-1008.9" }, { "binary_name": "linux-modules-6.8.0-1008-gcp", "binary_version": "6.8.0-1008.9" }, { "binary_name": "linux-modules-extra-6.8.0-1008-gcp", "binary_version": "6.8.0-1008.9" }, { "binary_name": "linux-modules-iwlwifi-6.8.0-1008-gcp", "binary_version": "6.8.0-1008.9" }, { "binary_name": "linux-tools-6.8.0-1008-gcp", "binary_version": "6.8.0-1008.9" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.8.0-1004-gke", "binary_version": "6.8.0-1004.7" }, { "binary_name": "linux-gke-headers-6.8.0-1004", "binary_version": "6.8.0-1004.7" }, { "binary_name": "linux-gke-tools-6.8.0-1004", "binary_version": "6.8.0-1004.7" }, { "binary_name": "linux-headers-6.8.0-1004-gke", "binary_version": "6.8.0-1004.7" }, { "binary_name": "linux-image-unsigned-6.8.0-1004-gke", "binary_version": "6.8.0-1004.7" }, { "binary_name": "linux-image-unsigned-6.8.0-1004-gke-dbgsym", "binary_version": "6.8.0-1004.7" }, { "binary_name": "linux-modules-6.8.0-1004-gke", "binary_version": "6.8.0-1004.7" }, { "binary_name": "linux-modules-extra-6.8.0-1004-gke", "binary_version": "6.8.0-1004.7" }, { "binary_name": "linux-modules-iwlwifi-6.8.0-1004-gke", "binary_version": "6.8.0-1004.7" }, { "binary_name": "linux-tools-6.8.0-1004-gke", "binary_version": "6.8.0-1004.7" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.8.0-1006-ibm", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-headers-6.8.0-1006-ibm", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-ibm-cloud-tools-common", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-ibm-headers-6.8.0-1006", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-ibm-source-6.8.0", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-ibm-tools-6.8.0-1006", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-image-unsigned-6.8.0-1006-ibm", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-image-unsigned-6.8.0-1006-ibm-dbgsym", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-modules-6.8.0-1006-ibm", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-modules-extra-6.8.0-1006-ibm", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-modules-iwlwifi-6.8.0-1006-ibm", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-tools-6.8.0-1006-ibm", "binary_version": "6.8.0-1006.6" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.8.0-35-lowlatency", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-buildinfo-6.8.0-35-lowlatency-64k", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-cloud-tools-6.8.0-35-lowlatency", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-headers-6.8.0-35-lowlatency", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-headers-6.8.0-35-lowlatency-64k", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-image-unsigned-6.8.0-35-lowlatency", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-image-unsigned-6.8.0-35-lowlatency-64k", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-image-unsigned-6.8.0-35-lowlatency-64k-dbgsym", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-image-unsigned-6.8.0-35-lowlatency-dbgsym", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-lowlatency-cloud-tools-6.8.0-35", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-lowlatency-cloud-tools-common", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-lowlatency-headers-6.8.0-35", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-lowlatency-lib-rust-6.8.0-35-lowlatency", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-lowlatency-tools-6.8.0-35", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-lowlatency-tools-common", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-lowlatency-tools-host", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-modules-6.8.0-35-lowlatency", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-modules-6.8.0-35-lowlatency-64k", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-modules-iwlwifi-6.8.0-35-lowlatency", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-tools-6.8.0-35-lowlatency", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-tools-6.8.0-35-lowlatency-64k", "binary_version": "6.8.0-35.35.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.8.0-1006-oem", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-headers-6.8.0-1006-oem", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-image-unsigned-6.8.0-1006-oem", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-image-unsigned-6.8.0-1006-oem-dbgsym", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-modules-6.8.0-1006-oem", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-modules-ipu6-6.8.0-1006-oem", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-modules-iwlwifi-6.8.0-1006-oem", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-modules-usbio-6.8.0-1006-oem", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-oem-6.8-headers-6.8.0-1006", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-oem-6.8-tools-6.8.0-1006", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-tools-6.8.0-1006-oem", "binary_version": "6.8.0-1006.6" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.8.0-1006-oracle", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-buildinfo-6.8.0-1006-oracle-64k", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-headers-6.8.0-1006-oracle", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-headers-6.8.0-1006-oracle-64k", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-image-unsigned-6.8.0-1006-oracle", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-image-unsigned-6.8.0-1006-oracle-64k", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-image-unsigned-6.8.0-1006-oracle-64k-dbgsym", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-image-unsigned-6.8.0-1006-oracle-dbgsym", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-modules-6.8.0-1006-oracle", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-modules-6.8.0-1006-oracle-64k", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-modules-extra-6.8.0-1006-oracle", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-modules-extra-6.8.0-1006-oracle-64k", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-modules-iwlwifi-6.8.0-1006-oracle", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-oracle-headers-6.8.0-1006", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-oracle-tools-6.8.0-1006", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-tools-6.8.0-1006-oracle", "binary_version": "6.8.0-1006.6" }, { "binary_name": "linux-tools-6.8.0-1006-oracle-64k", "binary_version": "6.8.0-1006.6" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.8.0-1005-raspi", "binary_version": "6.8.0-1005.5" }, { "binary_name": "linux-headers-6.8.0-1005-raspi", "binary_version": "6.8.0-1005.5" }, { "binary_name": "linux-image-6.8.0-1005-raspi", "binary_version": "6.8.0-1005.5" }, { "binary_name": "linux-image-6.8.0-1005-raspi-dbgsym", "binary_version": "6.8.0-1005.5" }, { "binary_name": "linux-modules-6.8.0-1005-raspi", "binary_version": "6.8.0-1005.5" }, { "binary_name": "linux-raspi-headers-6.8.0-1005", "binary_version": "6.8.0-1005.5" }, { "binary_name": "linux-raspi-tools-6.8.0-1005", "binary_version": "6.8.0-1005.5" }, { "binary_name": "linux-tools-6.8.0-1005-raspi", "binary_version": "6.8.0-1005.5" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.8.0-35-generic", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-headers-6.8.0-35-generic", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-image-6.8.0-35-generic", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-image-6.8.0-35-generic-dbgsym", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-modules-6.8.0-35-generic", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-riscv-headers-6.8.0-35", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-riscv-tools-6.8.0-35", "binary_version": "6.8.0-35.35.1" }, { "binary_name": "linux-tools-6.8.0-35-generic", "binary_version": "6.8.0-35.35.1" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "linux-buildinfo-6.8.0-2004-raspi-realtime", "binary_version": "6.8.0-2004.4" }, { "binary_name": "linux-headers-6.8.0-2004-raspi-realtime", "binary_version": "6.8.0-2004.4" }, { "binary_name": "linux-image-6.8.0-2004-raspi-realtime", "binary_version": "6.8.0-2004.4" }, { "binary_name": "linux-image-6.8.0-2004-raspi-realtime-dbgsym", "binary_version": "6.8.0-2004.4" }, { "binary_name": "linux-modules-6.8.0-2004-raspi-realtime", "binary_version": "6.8.0-2004.4" }, { "binary_name": "linux-raspi-realtime-headers-6.8.0-2004", "binary_version": "6.8.0-2004.4" }, { "binary_name": "linux-raspi-realtime-tools-6.8.0-2004", "binary_version": "6.8.0-2004.4" }, { "binary_name": "linux-tools-6.8.0-2004-raspi-realtime", "binary_version": "6.8.0-2004.4" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "linux-buildinfo-6.8.1-1002-realtime", "binary_version": "6.8.1-1002.2" }, { "binary_name": "linux-cloud-tools-6.8.1-1002-realtime", "binary_version": "6.8.1-1002.2" }, { "binary_name": "linux-headers-6.8.1-1002-realtime", "binary_version": "6.8.1-1002.2" }, { "binary_name": "linux-image-unsigned-6.8.1-1002-realtime", "binary_version": "6.8.1-1002.2" }, { "binary_name": "linux-image-unsigned-6.8.1-1002-realtime-dbgsym", "binary_version": "6.8.1-1002.2" }, { "binary_name": "linux-modules-6.8.1-1002-realtime", "binary_version": "6.8.1-1002.2" }, { "binary_name": "linux-modules-extra-6.8.1-1002-realtime", "binary_version": "6.8.1-1002.2" }, { "binary_name": "linux-modules-iwlwifi-6.8.1-1002-realtime", "binary_version": "6.8.1-1002.2" }, { "binary_name": "linux-realtime-cloud-tools-6.8.1-1002", "binary_version": "6.8.1-1002.2" }, { "binary_name": "linux-realtime-headers-6.8.1-1002", "binary_version": "6.8.1-1002.2" }, { "binary_name": "linux-realtime-tools-6.8.1-1002", "binary_version": "6.8.1-1002.2" }, { "binary_name": "linux-tools-6.8.1-1002-realtime", "binary_version": "6.8.1-1002.2" } ] }