CVE-2025-40292

CVE-2025-40292 affects the Linux kernel virtio-net receive path. After a change where big-packet buffer size depends on negotiated MTU (instead of MAX_SKB_FRAGS * PAGE_SIZE) and the host can announce a malicious length, a received length check could dereference a NULL page when processing oversiz...