In the Linux kernel, the following vulnerability has been resolved:
net: fix crash when config small gso_max_size/gso_ipv4_max_size
Config a small gso_max_size/gso_ipv4_max_size will lead to an underflow in sk_dst_gso_max_size(), which may trigger a BUG_ON crash, because sk->sk_gso_max_size would be much bigger than device limits. Call Trace: tcp_write_xmit tso_segs = tcp_init_tso_segs(skb, mss_now); tcp_set_skb_tso_segs tcp_skb_pcount_set // skb->len = 524288, mss_now = 8 // u16 tso_segs = 524288/8 = 65535 -> 0 tso_segs = DIV_ROUND_UP(skb->len, mss_now) BUG_ON(!tso_segs) Add check for the minimum value of gso_max_size and gso_ipv4_max_size.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-livepatch-5.15.184-125.190Upgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool | May 30, 2025 | Nov 9, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-common | Feb 17, 2025 | Nov 9, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jan 14, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Feb 11, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Feb 11, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Jan 15, 2025 | Nov 9, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Nov 9, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 9, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-azureUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-awsUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-gcpUpgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-kvm-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-aws-5.15Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-azure-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-genericUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-virtual-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-oem-24.04bUpgrade linux-image-fips-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-fipsUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-intelUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-azure-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-5.15 | Feb 20, 2025 | Nov 9, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Nov 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub