In the Linux kernel, the following vulnerability has been resolved:
igb: cope with large MAX_SKB_FRAGS
Sabrina reports that the igb driver does not cope well with large MAX_SKB_FRAG values: setting MAX_SKB_FRAG to 45 causes payload corruption on TX.
An easy reproducer is to run ssh to connect to the machine. With MAX_SKB_FRAGS=17 it works, with MAX_SKB_FRAGS=45 it fails. This has been reported originally in https://bugzilla.redhat.com/show_bug.cgi?id=2265320
The root cause of the issue is that the driver does not take into account properly the (possibly large) shared info size when selecting the ring layout, and will try to fit two packets inside the same 4K page even when the 1st fraglist will trump over the 2nd head.
Address the issue by checking if 2K buffers are insufficient.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 11, 2024 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade dtb-marvellUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade dtb-appleUpgrade dtb-caviumUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade kernel-develUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-macrosUpgrade kernel-debugUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-gkeop-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-generic-64k-hwe-22.04 | Dec 13, 2024 | Sep 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub