The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
igb: cope with large MAX_SKB_FRAGS
Sabrina reports that the igb driver does not cope well with large MAX_SKB_FRAG values: setting MAX_SKB_FRAG to 45 causes payload corruption on TX.
An easy reproducer is to run ssh to connect to the machine. With MAX_SKB_FRAGS=17 it works, with MAX_SKB_FRAGS=45 it fails. This has been reported originally in https://bugzilla.redhat.com/show_bug.cgi?id=2265320
The root cause of the issue is that the driver does not take into account properly the (possibly large) shared info size when selecting the ring layout, and will try to fit two packets inside the same 4K page even when the 1st fraglist will trump over the 2nd head.
Address the issue by checking if 2K buffers are insufficient.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 11, 2024 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-socionextUpgrade kernel-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kernel-source-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-marvellUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kernel-debug-develUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-debug | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-gcpUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-6.8 | Dec 13, 2024 | Sep 11, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub