The vulnerability of the qfq_change_class() function in Linux operating systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the qfqchangeclass function in Linux operating systems stems from the operation of storing values outside of the buffer in memory when processing the QFQMINLMAX value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.

...

CVE-2023-31436

qfqchangeclass in net/sched/schqfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQMINLMAX...