Threats tagged 'ghsa-35qp-2m3w-q656'

CVE-2024-36244 is a medium severity vulnerability in the Linux kernel's taprio traffic scheduler. The issue involves insufficient restriction on the cycle time parameter, allowing it to be shorter than the sum of scheduled entry intervals. This flaw could lead to denial of service by disrupting the scheduling cycle. The vulnerability was identified and fixed by extending the minimum interval restriction to the entire cycle time, ensuring the cycle time is appropriately constrained relative to the number of schedule entries. A selftest demonstrating the issue was added to validate the fix.