CVE-2026-90063

CVE-2026-90063 is a vulnerability in the Linux kernel's virtio-net driver. A user can specify a gso_size smaller than 8 (below TCP_MIN_GSO_SIZE) in a packet crafted via an AF_PACKET PACKET_VNET_HDR socket. Because GSO_MAX_SIZE equals 8 × 65535, dividing the SKB length by a gso_size

EUVD-2026-81924

In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don't overflow gsosegs The user can specify any gsosize in a packet crafted with an AFPACKET PACKETVNETHDR socket, even smaller than TCPMINGSOSIZE = 8. At the same time, GSOMAXSIZE = 8 GSOMAXSE...

CVE-2024-49949 net: avoid potential underflow in qdisc_pkt_len_init() with UFO

In the Linux kernel, the following vulnerability has been resolved: net: avoid potential underflow in qdiscpktleninit with UFO After commit 7c6d2ecbda83 "net: be more gentle about silly gso requests coming from user" virtionethdrtoskb had sanity check to detect malicious attempts from user space ...