Threats tagged 'ghsa-m5hh-pp2g-6f3p'

A vulnerability in the Linux kernel's net/sched subsystem related to the Deficit Round Robin (DRR) queuing discipline was resolved. The issue involves improper handling of the quantum parameter in the drr_change_class() function, where an explicit quantum value of zero is rejected but a fallback to psched_mtu() occurs without a minimum floor. This can cause the deficit-refill loop to spin indefinitely under the qdisc lock when a crafted size table causes qdisc_pkt_len to reach approximately 2 GiB. The vulnerability requires the CONFIG_NET_SCH_DRR kernel configuration and CAP_NET_ADMIN privileges to exploit.