In the Linux kernel, the following vulnerability has been resolved:
net: mana: Fix Rx DMA datasize and skb_over_panic
mana_get_rxbuf_cfg() aligns the RX buffer's DMA datasize to be multiple of 64. So a packet slightly bigger than mtu+14, say 1536, can be received and cause skb_over_panic.
Sample dmesg: [ 5325.237162] skbuff: skb_over_panic: text:ffffffffc043277a len:1536 put:1536 head:ff1100018b517000 data:ff1100018b517100 tail:0x700 end:0x6ea dev:<NULL> [ 5325.243689] ------------[ cut here ]------------ [ 5325.245748] kernel BUG at net/core/skbuff.c:192! [ 5325.247838] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [ 5325.258374] RIP: 0010:skb_panic+0x4f/0x60 [ 5325.302941] Call Trace: [ 5325.304389] <IRQ> [ 5325.315794] ? skb_panic+0x4f/0x60 [ 5325.317457] ? asm_exc_invalid_op+0x1f/0x30 [ 5325.319490] ? skb_panic+0x4f/0x60 [ 5325.321161] skb_put+0x4e/0x50 [ 5325.322670] mana_poll+0x6fa/0xb50 [mana] [ 5325.324578] __napi_poll+0x33/0x1e0 [ 5325.326328] net_rx_action+0x12e/0x280
As discussed internally, this alignment is not necessary. To fix this bug, remove it from the code. So oversized packets will be marked as CQE_RX_TRUNCATED by NIC, and dropped.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 19, 2024 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade dtb-armUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-source-vanillaUpgrade kernel-macrosUpgrade dtb-sprdUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-source-azureUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optional | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gkeUpgrade linux-image-6.5.0-1023-azureUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-6.8.0-1009-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.5.0-1023-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-6.8.0-1009-azureUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-ibmUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-nvidia | Jul 9, 2024 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub