CVE-2025-22055 net: fix geneve_opt length integer overflow

In the Linux kernel, the following vulnerability has been resolved: net: fix geneveopt length integer overflow struct geneveopt uses 5 bit length for each single option, which means every vary size option should be smaller than 128 bytes. However, all current related Netlink policies cannot promi...

CVE-2025-22055 net: fix geneve_opt length integer overflow

In the Linux kernel, the following vulnerability has been resolved: net: fix geneveopt length integer overflow struct geneveopt uses 5 bit length for each single option, which means every vary size option should be smaller than 128 bytes. However, all current related Netlink policies cannot promi...

CVE-2025-22055

CVE-2025-22055 affects the Linux kernel: a vulnerability in geneve_opt length handling (5-bit length per option) can let an attacker craft a 128-byte option to cause a heap out-of-bounds read. The issue originates from Netlink policy length guarantees not enforcing the 128-byte bound. The provide...