CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the network shaper component, specifically in the handling of duplicate leaf entries during GROUP requests. This flaw can lead to a double free of parent pointers, potentially causing memory corruption and instability in the system. Organizations using affected Linux kernel versions should prioritize patching this vulnerability to mitigate risks associated with system crashes and potential exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request net_shaper_nl_group_doit() does not deduplicate NET_SHAPER_A_LEAVES entries. When userspace supplies the same leaf handle twice, the same old-parent pointer lands twice in old_nodes[]. The cleanup loop double frees the parent. Of course the same parent may still be in old_nodes[] twice if we are moving multiple of its leaves. Note that this patch also implicitly fixes the fact that the i >= leaves_count path forgets to set ret.