Threats tagged 'ghsa-wq2r-f96j-67j9'

A vulnerability in the Linux kernel's net/sched subsystem (sfq qdisc) allows a crafted quantum value to cause a denial of service by triggering a soft lockup. The issue arises because the sfq_change() function accepts any non-negative quantum, enabling a crafted packet length to cause the deficit-refill loop to spin excessively under the qdisc lock. This requires CAP_NET_ADMIN privileges and specific configuration to exploit.