CVE-2023-53624

net/sched: sch_fq: fix integer overflow of "credit"

published October 7, 2025

CVSS
—
EPSS
0%
Percentile
9.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net/sched: sch_fq: fix integer overflow of "credit"

if sch_fq is configured with "initial quantum" having values greater than

INT_MAX, the first assignment of "credit" does signed integer overflow to

a very negative value.

In this situation, the syzkaller script provided by Cristoph triggers the

CPU soft-lockup warning even with few sockets. It's not an infinite loop,

but "credit" wasn't probably meant to be minus 2Gb for each new flow.

Capping "initial quantum" to INT_MAX proved to fix the issue.

v2: validation of "initial quantum" is done in fq_policy, instead of open

coding in fq_change() _ suggested by Jakub Kicinski

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.8th percentile
Published
2025-10-07T15:19Z
EPSS history
Timeline
  • 07 OCT 15:19Z
    net/sched: sch_fq: fix integer overflow of "credit"
    cvelistv5