In the Linux kernel, the following vulnerability has been resolved:
net: add more sanity checks to qdisc_pkt_len_init()
One path takes care of SKB_GSO_DODGY, assuming skb->len is bigger than hdr_len.
virtio_net_hdr_to_skb() does not fully dissect TCP headers, it only make sure it is at least 20 bytes.
It is possible for an user to provide a malicious 'GSO' packet, total length of 80 bytes.
- 20 bytes of IPv4 header - 60 bytes TCP header - a small gso_size like 8
virtio_net_hdr_to_skb() would declare this packet as a normal GSO packet, because it would see 40 bytes of payload, bigger than gso_size.
We need to make detect this case to not underflow qdisc_skb_cb(skb)->pkt_len.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.168-114.166Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade kernel-tools-devel | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade perfUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftool | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 11, 2025 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1145-azureUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-4.4.0-1180-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1023-awsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-oemUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-4.4.0-267-lowlatencyUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-24.04bUpgrade linux-image-4.15.0-2080-gcp-fipsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1143-kvmUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-4.15.0-1187-azureUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1073-awsUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-4.4.0-1142-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-236-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1172-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-azure-cvmUpgrade linux-image-4.15.0-1179-awsUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-4.4.0-1112-fipsUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-4.15.0-1141-oracleUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-azureUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-236-lowlatencyUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-4.15.0-2117-aws-fipsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-2096-azure-fipsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-ibmUpgrade linux-image-intelUpgrade linux-image-genericUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-54-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-4.15.0-1162-kvmUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1134-fipsUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-4.4.0-267-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1140-aws | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub