QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-36978

Back to search

CVE-2024-36978

Published: Jun 19, 2024

Modified: May 12, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multiq: fix possible OOB write in multiq_tune() q->bands will be assigned to qopt->bands to execute subsequent code logic after kmalloc. So the old q->bands should not be used in kmalloc. Otherwise, an out-of-bounds write will occur.

VendorProductVersions

Linux

Linux

affected
c2999f7fb05b87da4060e38150c70fa46794d82b - < d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d
affected
c2999f7fb05b87da4060e38150c70fa46794d82b - < 52b1aa07cda6a199cd6754d3798c7759023bc70f
affected
c2999f7fb05b87da4060e38150c70fa46794d82b - < 598572c64287aee0b75bbba4e2881496878860f3
affected
c2999f7fb05b87da4060e38150c70fa46794d82b - < 0f208fad86631e005754606c3ec80c0d44a11882
affected
c2999f7fb05b87da4060e38150c70fa46794d82b - < 54c2c171c11a798fe887b3ff72922aa9d1411c1e

+2 more versions

Linux

Linux

affected
5.4
unaffected
0 - < 5.4
unaffected
5.4.279 - <= 5.4.*
unaffected
5.10.221 - <= 5.10.*
unaffected
5.15.162 - <= 5.15.*

+4 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now