138 matches found
CVE-2026-59346-POC
CVE-2026-59346 — VMXNET3 TSO Integer Overflow VMware Workstation / Fusion Proof-of-concept for a 32-bit integer overflow in the VMXNET3 virtual NIC's TSO segmentation path in vmware-vmx, reachable from a guest VM. This issue is patched. The PoC is published for research and defensive purposes onl...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146843)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146843 advisory. In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TX descriptor availability check for TSO traffic stmmactsoxmit estimates the...
SUSE CVE-2026-98556
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
AZL-108581 CVE-2026-98556 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
DEBIAN-CVE-2026-98556
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556 gve: DQO: reject TSO packets with an out of range MSS
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556
The Linux kernel contains a vulnerability in the gve driver where TSO (TCP Segmentation Offload) packets with an out-of-range MSS (Maximum Segment Size) are not properly rejected. The gve_prep_tso() function fails to enforce the required limit of
EUVD-2026-103601
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556 gve: DQO: reject TSO packets with an out of range MSS
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
PT-2026-117072
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Generic Segmentation Offload GSO implementation for IP-in-IP. The system can re-enter the inet gso segment or ipv6 gso segment functions for each nested IP header...
Linux Distros Unpatched Vulnerability : CVE-2026-98556
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet...
CVE-2026-98556: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
PT-2026-128355
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gve prep tso notes that the device requires the MSS to be len and gso segs, never gso size. Such a packet reaches gve tx fill tso ctx desc, which puts gso size into the mss...
PT-2026-116775
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the gve driver where the gve prep tso function fails to enforce the Maximum Segment Size MSS limit of 9728 bytes. This occurs because the system incorrectly assumes th...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.14 contains a security vulnerability. This vulnerability arises from the fact that the gvepreptso function does not enforce the check that the MSS of TSO messages does not exceed 9728, and it also does not validate the gsosize of non-local-generated messages. As a resul...
CVE-2026-98288
A flaw was found in the Linux kernel's stmmac network driver. A local attacker could exploit this vulnerability to cause a Denial of Service DoS by transmitting specially crafted IPv6 packets with large header options. This issue occurs because the driver stores TCP Segmentation Offload TSO...
SUSE CVE-2026-98288
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TSO header length truncation stmmactsoxmit stores the protocol header length returned by stmmactsoheadersize in a u8. stmmactsovalidpacket admits headers up to 1023 bytes, so a header longer than 255 bytes wraps...