In the Linux kernel, the following vulnerability has been resolved:
net: mana: Fix Rx DMA datasize and skb_over_panic
mana_get_rxbuf_cfg() aligns the RX buffer's DMA datasize to be multiple of 64. So a packet slightly bigger than mtu+14, say 1536, can be received and cause skb_over_panic.
Sample dmesg: [ 5325.237162] skbuff: skb_over_panic: text:ffffffffc043277a len:1536 put:1536 head:ff1100018b517000 data:ff1100018b517100 tail:0x700 end:0x6ea dev:<NULL> [ 5325.243689] ------------[ cut here ]------------ [ 5325.245748] kernel BUG at net/core/skbuff.c:192! [ 5325.247838] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [ 5325.258374] RIP: 0010:skb_panic+0x4f/0x60 [ 5325.302941] Call Trace: [ 5325.304389] <IRQ> [ 5325.315794] ? skb_panic+0x4f/0x60 [ 5325.317457] ? asm_exc_invalid_op+0x1f/0x30 [ 5325.319490] ? skb_panic+0x4f/0x60 [ 5325.321161] skb_put+0x4e/0x50 [ 5325.322670] mana_poll+0x6fa/0xb50 [mana] [ 5325.324578] __napi_poll+0x33/0x1e0 [ 5325.326328] net_rx_action+0x12e/0x280
As discussed internally, this alignment is not necessary. To fix this bug, remove it from the code. So oversized packets will be marked as CQE_RX_TRUNCATED by NIC, and dropped.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 19, 2024 |
| Suse | — | Upgrade dtb-xilinxUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade kernel-develUpgrade dtb-freescaleUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade dtb-armUpgrade dtb-rockchipUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-default | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-6.8.0-1009-azureUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-genericUpgrade linux-image-6.5.0-1023-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1009-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-azure-cvmUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.5.0-1023-azureUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp | Jul 9, 2024 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub