In the Linux kernel, the following vulnerability has been resolved:
net: mana: Fix Rx DMA datasize and skb_over_panic
mana_get_rxbuf_cfg() aligns the RX buffer's DMA datasize to be multiple of 64. So a packet slightly bigger than mtu+14, say 1536, can be received and cause skb_over_panic.
Sample dmesg: [ 5325.237162] skbuff: skb_over_panic: text:ffffffffc043277a len:1536 put:1536 head:ff1100018b517000 data:ff1100018b517100 tail:0x700 end:0x6ea dev:<NULL> [ 5325.243689] ------------[ cut here ]------------ [ 5325.245748] kernel BUG at net/core/skbuff.c:192! [ 5325.247838] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [ 5325.258374] RIP: 0010:skb_panic+0x4f/0x60 [ 5325.302941] Call Trace: [ 5325.304389] <IRQ> [ 5325.315794] ? skb_panic+0x4f/0x60 [ 5325.317457] ? asm_exc_invalid_op+0x1f/0x30 [ 5325.319490] ? skb_panic+0x4f/0x60 [ 5325.321161] skb_put+0x4e/0x50 [ 5325.322670] mana_poll+0x6fa/0xb50 [mana] [ 5325.324578] __napi_poll+0x33/0x1e0 [ 5325.326328] net_rx_action+0x12e/0x280
As discussed internally, this alignment is not necessary. To fix this bug, remove it from the code. So oversized packets will be marked as CQE_RX_TRUNCATED by NIC, and dropped.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 19, 2024 |
| Suse | — | Upgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade dtb-amazonUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade dtb-apmUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-amdUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade kernel-default-vdsoUpgrade dtb-armUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade dtb-sprdUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade kernel-syms-rtUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade kernel-source-vanillaUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-default | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.5.0-1023-azureUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1009-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-azure-cvmUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-6.8.0-1009-azureUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-intelUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1023-azure-fdeUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1011-aws | Jul 9, 2024 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub