Threats tagged 'ghsa-93pc-w6vh-hg9r'

A vulnerability in the Linux kernel's net/sched subsystem (hhf qdisc) allows a crafted quantum value from userspace to cause a denial of service via a soft lockup. The hhf_change() function accepted any quantum, including 1, which could cause the deficit-refill loop to spin excessively under the qdisc lock. This issue requires CAP_NET_ADMIN privileges and specific configuration. The vulnerability has been resolved by clamping the quantum value in hhf_change() and hhf_init() to safe ranges.