{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d","status":"affected","version":"c2999f7fb05b87da4060e38150c70fa46794d82b","versionType":"git"},{"lessThan":"52b1aa07cda6a199cd6754d3798c7759023bc70f","status":"affected","version":"c2999f7fb05b87da4060e38150c70fa46794d82b","versionType":"git"},{"lessThan":"598572c64287aee0b75bbba4e2881496878860f3","status":"affected","version":"c2999f7fb05b87da4060e38150c70fa46794d82b","versionType":"git"},{"lessThan":"0f208fad86631e005754606c3ec80c0d44a11882","status":"affected","version":"c2999f7fb05b87da4060e38150c70fa46794d82b","versionType":"git"},{"lessThan":"54c2c171c11a798fe887b3ff72922aa9d1411c1e","status":"affected","version":"c2999f7fb05b87da4060e38150c70fa46794d82b","versionType":"git"},{"lessThan":"d6fb5110e8722bc00748f22caeb650fe4672f129","status":"affected","version":"c2999f7fb05b87da4060e38150c70fa46794d82b","versionType":"git"},{"lessThan":"affc18fdc694190ca7575b9a86632a73b9fe043d","status":"affected","version":"c2999f7fb05b87da4060e38150c70fa46794d82b","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.4"},{"lessThan":"5.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.279","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.221","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.162","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.95","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.35","versionType":"semver"},{"lessThanOrEqual":"6.9.*","status":"unaffected","version":"6.9.6","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.10","versionType":"original_commit_for_fix"}]},{"defaultStatus":"unknown","product":"RUGGEDCOM RST2428P","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V3.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SCALANCE XCM-/XRM-/XCH-/XRH-300 family","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V3.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V1.1.1","status":"affected","version":"0","versionType":"custom"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.4.279","versionStartIncluding":"5.4","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.10.221","versionStartIncluding":"5.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.15.162","versionStartIncluding":"5.11","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.1.95","versionStartIncluding":"5.16","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.6.35","versionStartIncluding":"6.2","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.9.6","versionStartIncluding":"6.7","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2024-36978","cwes":["CWE-787"],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: sch_multiq: fix possible OOB write in multiq_tune()\n\nq->bands will be assigned to qopt->bands to execute subsequent code logic\nafter kmalloc. So the old q->bands should not be used in kmalloc.\nOtherwise, an out-of-bounds write will occur.","epss":{"date":"2026-11-03","percentile":0.20734,"score":0.00281},"exploits":[],"kev":null,"metrics":[{"score":7.8,"severity":"high","source":"CNA: Linux","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},{"score":7.8,"severity":"high","source":"NVD: nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},{"score":7.8,"severity":"high","source":"NVD: 416baaa9-dc9f-4396-8d5f-8c081fb06d67","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793744239813,"publishedAt":1718778023103,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/52b1aa07cda6a199cd6754d3798c7759023bc70f"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/598572c64287aee0b75bbba4e2881496878860f3"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/0f208fad86631e005754606c3ec80c0d44a11882"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/54c2c171c11a798fe887b3ff72922aa9d1411c1e"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d6fb5110e8722bc00748f22caeb650fe4672f129"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/affc18fdc694190ca7575b9a86632a73b9fe043d"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://git.kernel.org/stable/c/d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://git.kernel.org/stable/c/52b1aa07cda6a199cd6754d3798c7759023bc70f"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://git.kernel.org/stable/c/598572c64287aee0b75bbba4e2881496878860f3"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://git.kernel.org/stable/c/0f208fad86631e005754606c3ec80c0d44a11882"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://git.kernel.org/stable/c/54c2c171c11a798fe887b3ff72922aa9d1411c1e"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://git.kernel.org/stable/c/d6fb5110e8722bc00748f22caeb650fe4672f129"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://git.kernel.org/stable/c/affc18fdc694190ca7575b9a86632a73b9fe043d"},{"source":"ADP: CVE","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-355557.html"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/0f208fad86631e005754606c3ec80c0d44a11882"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/52b1aa07cda6a199cd6754d3798c7759023bc70f"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/54c2c171c11a798fe887b3ff72922aa9d1411c1e"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/598572c64287aee0b75bbba4e2881496878860f3"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/affc18fdc694190ca7575b9a86632a73b9fe043d"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/d6fb5110e8722bc00748f22caeb650fe4672f129"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://git.kernel.org/stable/c/0f208fad86631e005754606c3ec80c0d44a11882"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://git.kernel.org/stable/c/52b1aa07cda6a199cd6754d3798c7759023bc70f"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://git.kernel.org/stable/c/54c2c171c11a798fe887b3ff72922aa9d1411c1e"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://git.kernel.org/stable/c/598572c64287aee0b75bbba4e2881496878860f3"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://git.kernel.org/stable/c/affc18fdc694190ca7575b9a86632a73b9fe043d"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://git.kernel.org/stable/c/d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://git.kernel.org/stable/c/d6fb5110e8722bc00748f22caeb650fe4672f129"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-355557.html"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html"}],"remediation":[{"kind":"fix","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://git.kernel.org/stable/c/0f208fad86631e005754606c3ec80c0d44a11882"},{"kind":"fix","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://git.kernel.org/stable/c/52b1aa07cda6a199cd6754d3798c7759023bc70f"},{"kind":"fix","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://git.kernel.org/stable/c/54c2c171c11a798fe887b3ff72922aa9d1411c1e"},{"kind":"fix","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://git.kernel.org/stable/c/598572c64287aee0b75bbba4e2881496878860f3"},{"kind":"fix","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://git.kernel.org/stable/c/affc18fdc694190ca7575b9a86632a73b9fe043d"},{"kind":"fix","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://git.kernel.org/stable/c/d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d"},{"kind":"fix","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://git.kernel.org/stable/c/d6fb5110e8722bc00748f22caeb650fe4672f129"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://git.kernel.org/stable/c/0f208fad86631e005754606c3ec80c0d44a11882"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://git.kernel.org/stable/c/52b1aa07cda6a199cd6754d3798c7759023bc70f"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://git.kernel.org/stable/c/54c2c171c11a798fe887b3ff72922aa9d1411c1e"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://git.kernel.org/stable/c/598572c64287aee0b75bbba4e2881496878860f3"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://git.kernel.org/stable/c/affc18fdc694190ca7575b9a86632a73b9fe043d"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://git.kernel.org/stable/c/d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://git.kernel.org/stable/c/d6fb5110e8722bc00748f22caeb650fe4672f129"}],"revision":"d49817c0fdf2884b0560c60761b0e2a6330eb8ecfb5a7eabdb3b2833fbf5ae5e","sources":[{"modifiedAt":1793742756867,"name":"CNA: Linux","retrievedAt":1793743948555,"url":"https://www.cve.org/CVERecord?id=CVE-2024-36978"},{"modifiedAt":1793744239813,"name":"NVD","retrievedAt":1793751357017,"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36978"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793744008124,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-36978"}],"ssvc":{"assessedAt":1732251313173,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"net: sched: sch_multiq: fix possible OOB write in multiq_tune()","updatedAt":1793751357017}