In the Linux kernel, the following vulnerability has been resolved:
net: add more sanity checks to qdisc_pkt_len_init()
One path takes care of SKB_GSO_DODGY, assuming skb->len is bigger than hdr_len.
virtio_net_hdr_to_skb() does not fully dissect TCP headers, it only make sure it is at least 20 bytes.
It is possible for an user to provide a malicious 'GSO' packet, total length of 80 bytes.
- 20 bytes of IPv4 header - 60 bytes TCP header - a small gso_size like 8
virtio_net_hdr_to_skb() would declare this packet as a normal GSO packet, because it would see 40 bytes of payload, bigger than gso_size.
We need to make detect this case to not underflow qdisc_skb_cb(skb)->pkt_len.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.168-114.166Upgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.115-126.197Upgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfo | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Feb 11, 2025 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-4.15.0-1162-kvmUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-4.15.0-1134-fipsUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-gkeUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-4.15.0-2096-azure-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-azure-nvidiaUpgrade linux-image-4.4.0-267-genericUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-intelUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-236-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-2117-aws-fipsUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-4.15.0-1141-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1142-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1023-awsUpgrade linux-image-4.4.0-1112-fipsUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-4.15.0-1172-gcpUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1145-azureUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-2080-gcp-fipsUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-4.4.0-1143-kvmUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-4.15.0-1187-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-oemUpgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1179-awsUpgrade linux-image-4.4.0-1142-awsUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-4.4.0-267-lowlatencyUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-4.4.0-1180-awsUpgrade linux-image-4.15.0-236-genericUpgrade linux-image-bluefieldUpgrade linux-image-azure-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-fipsUpgrade linux-image-aws-hweUpgrade linux-image-6.11.0-1011-oracle | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub