In the Linux kernel, the following vulnerability has been resolved:
igb: cope with large MAX_SKB_FRAGS
Sabrina reports that the igb driver does not cope well with large MAX_SKB_FRAG values: setting MAX_SKB_FRAG to 45 causes payload corruption on TX.
An easy reproducer is to run ssh to connect to the machine. With MAX_SKB_FRAGS=17 it works, with MAX_SKB_FRAGS=45 it fails. This has been reported originally in https://bugzilla.redhat.com/show_bug.cgi?id=2265320
The root cause of the issue is that the driver does not take into account properly the (possibly large) shared info size when selecting the ring layout, and will try to fit two packets inside the same 4K page even when the 1st fraglist will trump over the 2nd head.
Address the issue by checking if 2K buffers are insufficient.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 11, 2024 |
| Suse | — | Upgrade dtb-lgUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-rt-extraUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rtUpgrade dtb-amdUpgrade dtb-exynosUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-caviumUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade kernel-debug-vdsoUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-debug-develUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade dtb-armUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default-optional | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-gkeopUpgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency | Dec 13, 2024 | Sep 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub