CVE-2024-26815

In the Linux kernel, the following vulnerability has been resolved:

net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check

The Linux kernel CVE team has assigned CVE-2024-26815 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024041006-CVE-2024-26815-7f4e@gregkh/T

This vulnerability is evaluated as having a Low impact because exploitation requires local administrative privileges (CAP_NET_ADMIN) to configure network queueing disciplines. In standard Red Hat Enterprise Linux configurations, unprivileged users cannot manipulate traffic control settings. Additionally, the Time-Aware Priority (TAPRIO) scheduler is an optional component typically used only in specialized real-time or time-sensitive networking environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.