In the Linux kernel, the following vulnerability has been resolved:
net: mana: Fix Rx DMA datasize and skb_over_panic
mana_get_rxbuf_cfg() aligns the RX buffer's DMA datasize to be multiple of 64. So a packet slightly bigger than mtu+14, say 1536, can be received and cause skb_over_panic.
Sample dmesg: [ 5325.237162] skbuff: skb_over_panic: text:ffffffffc043277a len:1536 put:1536 head:ff1100018b517000 data:ff1100018b517100 tail:0x700 end:0x6ea dev:<NULL> [ 5325.243689] ------------[ cut here ]------------ [ 5325.245748] kernel BUG at net/core/skbuff.c:192! [ 5325.247838] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [ 5325.258374] RIP: 0010:skb_panic+0x4f/0x60 [ 5325.302941] Call Trace: [ 5325.304389] <IRQ> [ 5325.315794] ? skb_panic+0x4f/0x60 [ 5325.317457] ? asm_exc_invalid_op+0x1f/0x30 [ 5325.319490] ? skb_panic+0x4f/0x60 [ 5325.321161] skb_put+0x4e/0x50 [ 5325.322670] mana_poll+0x6fa/0xb50 [mana] [ 5325.324578] __napi_poll+0x33/0x1e0 [ 5325.326328] net_rx_action+0x12e/0x280
As discussed internally, this alignment is not necessary. To fix this bug, remove it from the code. So oversized packets will be marked as CQE_RX_TRUNCATED by NIC, and dropped.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 19, 2024 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade ocfs2-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-azureUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dtb-socionextUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-apmUpgrade dtb-lgUpgrade dtb-amazonUpgrade dtb-marvellUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-rtUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade dtb-sprdUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-azure-vdsoUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-default | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-intelUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1023-azure-fdeUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1009-azureUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1009-azure-fdeUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.5.0-1023-azure | Jul 9, 2024 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub