CVE-2026-80725

CVE-2026-80725 is an out-of-bounds write in the Linux kernel's GRO (Generic Receive Offload) subsystem, specifically in skb_gro_receive(). Improper validation of BIG TCP aggregation criteria allows crafted frames (e.g., injected via AF_PACKET ) to trigger a memmove() before skb->head when ipv6...

CVE-2026-80725 net: gro: properly validate BIG TCP aggregation criteria

In the Linux kernel, the following vulnerability has been resolved: net: gro: properly validate BIG TCP aggregation criteria When GRO attempts to aggregate packets beyond GROLEGACYMAXSIZE 64KB, BIG TCP should only be permitted for plain IPv4 TCP and plain IPv6 TCP with sufficient MAC header room ...