CVE-2024-53164

MediumCVSS 5.5/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: sched: fix ordering of qlen adjustment

Changes to sch->q.qlen around qdisc_tree_reduce_backlog() need to happen _before_ a call to said function because otherwise it may fail to notify parent qdiscs when the child is about to become empty.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 959466588aa7f84ccf79ae36a1d89542eaf9aaec, < 44782565e1e6174c94bddfa72ac7267cd09c1648; >= 959466588aa7f84ccf79ae36a1d89542eaf9aaec, < 5e473f462a16f1a34e49ea4289a667d2e4f35b52; >= 959466588aa7f84ccf79ae36a1d89542eaf9aaec, < 33db36b3c53d0fda2699ea39ba72bee4de8336e8; >= 959466588aa7f84ccf79ae36a1d89542eaf9aaec, < 489422e2befff88a1de52b2acebe7b333bded025; >= 959466588aa7f84ccf79ae36a1d89542eaf9aaec, < 97e13434b5da8e91bdf965352fad2141d13d72d3; >= 959466588aa7f84ccf79ae36a1d89542eaf9aaec, < e3e54ad9eff8bdaa70f897e5342e34b76109497f; >= 959466588aa7f84ccf79ae36a1d89542eaf9aaec, < 5eb7de8cd58e73851cd37ff8d0666517d9926948
LinuxLinux4.14
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5

References

Timeline

Published
Dec 27, 2024
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-531657.8In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the CVE-2024-531667.8In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix bfqq uaf in bfq_limit_depth() Set new allocated bfqq tCVE-2024-531675.5In the Linux kernel, the following vulnerability has been resolved: nfs/blocklayout: Don't attempt unregister for invalid block device SinCVE-2024-531687.8In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket BUG: KASACVE-2024-531694.7In the Linux kernel, the following vulnerability has been resolved: nvme-fabrics: fix kernel crash while shutting down controller The nvmeCVE-2024-53176.1The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'np1' parameter in all versions up to, and includinCVE-2024-531707.8In the Linux kernel, the following vulnerability has been resolved: block: fix uaf for flush rq while iterating tags blk_mq_clear_flush_rqCVE-2024-531717.8In the Linux kernel, the following vulnerability has been resolved: ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit AfteCVE-2024-531725.5In the Linux kernel, the following vulnerability has been resolved: ubi: fastmap: Fix duplicate slab cache names while attaching Since comCVE-2024-531737.8In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open() Yang CVE-2024-531747.8In the Linux kernel, the following vulnerability has been resolved: SUNRPC: make sure cache entry active before cache_show The function `cCVE-2024-531755.5In the Linux kernel, the following vulnerability has been resolved: ipc: fix memleak if msg_init_ns failed in create_ipc_ns Percpu memory