1. Home
  2. CVE
  3. Detail
0.0
NA
CVE-2024-53164
Linux Kernel NetQDisc Ordering fromDate
Description

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch->q.qlen around qdisc_tree_reduce_backlog() need to happen _before_ a call to said function because otherwise it may fail to notify parent qdiscs when the child is about to become empty.

INFO

Published Date :

Dec. 27, 2024, 2:15 p.m.

Last Modified :

Jan. 9, 2025, 4:16 p.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2024-53164 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Linux linux_kernel
: Total Affected Vendor : 1 | Products : 1
Solution
The Linux kernel requires an update to address a netqdisc ordering vulnerability.
  • Update the affected kernel packages.
  • Update all affected packages.
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2024-53164.

URL Resource
https://git.kernel.org/stable/c/33db36b3c53d0fda2699ea39ba72bee4de8336e8
https://git.kernel.org/stable/c/44782565e1e6174c94bddfa72ac7267cd09c1648
https://git.kernel.org/stable/c/489422e2befff88a1de52b2acebe7b333bded025
https://git.kernel.org/stable/c/5e473f462a16f1a34e49ea4289a667d2e4f35b52
https://git.kernel.org/stable/c/5eb7de8cd58e73851cd37ff8d0666517d9926948
https://git.kernel.org/stable/c/97e13434b5da8e91bdf965352fad2141d13d72d3
https://git.kernel.org/stable/c/e3e54ad9eff8bdaa70f897e5342e34b76109497f
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-53164 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2024-53164 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2024-53164 vulnerability anywhere in the article.

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2024-53164 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Jan. 09, 2025

    Action Type Old Value New Value
    Added Reference https://git.kernel.org/stable/c/33db36b3c53d0fda2699ea39ba72bee4de8336e8
    Added Reference https://git.kernel.org/stable/c/44782565e1e6174c94bddfa72ac7267cd09c1648
    Added Reference https://git.kernel.org/stable/c/5e473f462a16f1a34e49ea4289a667d2e4f35b52
  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Dec. 27, 2024

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch->q.qlen around qdisc_tree_reduce_backlog() need to happen _before_ a call to said function because otherwise it may fail to notify parent qdiscs when the child is about to become empty.
    Added Reference https://git.kernel.org/stable/c/489422e2befff88a1de52b2acebe7b333bded025
    Added Reference https://git.kernel.org/stable/c/5eb7de8cd58e73851cd37ff8d0666517d9926948
    Added Reference https://git.kernel.org/stable/c/97e13434b5da8e91bdf965352fad2141d13d72d3
    Added Reference https://git.kernel.org/stable/c/e3e54ad9eff8bdaa70f897e5342e34b76109497f
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Vulnerability Scoring Details
No CVSS metrics available for this vulnerability.