In the Linux kernel, the following vulnerability has been resolved:
net: add more sanity checks to qdisc_pkt_len_init()
One path takes care of SKB_GSO_DODGY, assuming skb->len is bigger than hdr_len.
virtio_net_hdr_to_skb() does not fully dissect TCP headers, it only make sure it is at least 20 bytes.
It is possible for an user to provide a malicious 'GSO' packet, total length of 80 bytes.
- 20 bytes of IPv4 header - 60 bytes TCP header - a small gso_size like 8
virtio_net_hdr_to_skb() would declare this packet as a normal GSO packet, because it would see 40 bytes of payload, bigger than gso_size.
We need to make detect this case to not underflow qdisc_skb_cb(skb)->pkt_len.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.168-114.166 | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftoolUpgrade kernel-livepatch-6.1.115-126.197Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfo | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Feb 11, 2025 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-4.4.0-1112-fipsUpgrade linux-image-4.15.0-1179-awsUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-awsUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-oemUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-4.4.0-1180-awsUpgrade linux-image-aws-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-236-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-4.15.0-1187-azureUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-4.4.0-1142-awsUpgrade linux-image-realtimeUpgrade linux-image-aws-hweUpgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-1143-kvmUpgrade linux-image-4.15.0-2080-gcp-fipsUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.4.0-1145-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-4.15.0-1172-gcpUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-4.4.0-267-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1162-kvmUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-236-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-4.15.0-1141-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-4.15.0-1134-fipsUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-oem-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-azure-lts-18.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-267-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-4.15.0-2096-azure-fipsUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-4.15.0-2117-aws-fipsUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-54-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-oem-24.04Upgrade linux-image-gkeUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1010-lowlatency | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub