In the Linux kernel, the following vulnerability has been resolved:
virtio-net: fix received length check in big packets
Since commit 4959aebba8c0 ("virtio-net: use mtu size as buffer length for big packets"), when guest gso is off, the allocated size for big packets is not MAX_SKB_FRAGS * PAGE_SIZE anymore but depends on negotiated MTU. The number of allocated frags for big packets is stored in vi->big_packets_num_skbfrags.
Because the host announced buffer length can be malicious (e.g. the host vhost_net driver's get_rx_bufs is modified to announce incorrect length), we need a check in virtio_net receive path. Currently, the check is not adapted to the new change which can lead to NULL page pointer dereference in the below while loop when receiving length that is larger than the allocated one.
This commit fixes the received length check corresponding to the new change.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.159-181.297Upgrade kernel-develUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-tools-develUpgrade perfUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-develUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-toolsUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel6.12-libbpfUpgrade perf-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade bpftool6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-livepatch-6.12.58-82.121Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel6.12-headersUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel6.12-libbpf-develUpgrade kernelUpgrade kernel6.12-modules-extraUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade bpftool6.12Upgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel6.12Upgrade kernel-modules-extra-common | Jan 12, 2026 | Dec 8, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 12, 2026 | Jan 12, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 15, 2026 | Dec 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 8, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-6.17Upgrade linux-image-gke-6.8Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-6.17.0-1008-azureUpgrade linux-image-aws-fipsUpgrade linux-image-azure-6.17Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtime-6.17Upgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-gkeopUpgrade linux-image-azure-fipsUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-aws-64k-6.17Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-generic-64k-6.17Upgrade linux-image-nvidiaUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.17.0-1007-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04Upgrade linux-image-aws-6.17Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-raspi-6.17Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.17.0-1011-oemUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-awsUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-generic-6.17Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-6.17Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-xilinxUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-oem-6.17Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-6.17Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-lowlatency-hwe-22.04 | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Dec 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub