23 matches found
SUSE CVE-2026-98556
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
AZL-108581 CVE-2026-98556 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556
The Linux kernel contains a vulnerability in the gve driver where TSO (TCP Segmentation Offload) packets with an out-of-range MSS (Maximum Segment Size) are not properly rejected. The gve_prep_tso() function fails to enforce the required limit of
CVE-2026-98556 gve: DQO: reject TSO packets with an out of range MSS
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
EUVD-2026-103601
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556 gve: DQO: reject TSO packets with an out of range MSS
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.14 contains a security vulnerability. This vulnerability arises from the fact that the gvepreptso function does not enforce the check that the MSS of TSO messages does not exceed 9728, and it also does not validate the gsosize of non-local-generated messages. As a resul...
CVE-2026-90063
A flaw was found in virtio-net, a network virtualization driver in the Linux kernel. A local user could exploit this vulnerability by crafting a specially designed TCP packet with a small gsosize value. This action could lead to an integer overflow in the gsosegs field during packet processing,...
AZL-102951 CVE-2026-90063 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don't overflow gsosegs The user can specify any gsosize in a packet crafted with an AFPACKET PACKETVNETHDR socket, even smaller than TCPMINGSOSIZE = 8. At the same time, GSOMAXSIZE = 8 GSOMAXSE...
CVE-2026-90063
In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don't overflow gsosegs The user can specify any gsosize in a packet crafted with an AFPACKET PACKETVNETHDR socket, even smaller than TCPMINGSOSIZE = 8. At the same time, GSOMAXSIZE = 8 GSOMAXSE...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from TCP/IPv6 incorrectly not limiting the MSS when the MTU is large. As a result, gsosize may be set to 0xFFFF, and it might be misinterpreted as GSOBYFRAGS. This can lead to a null pointer derefrence exception...
CVE-2023-54051: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: do not allow gsosize to be set to GSOBYFRAGS One missing check in virtionethdrtoskb allowed syzbot to crash kernels again 1 Do not allow gsosize to be set to GSOBYFRAGS 0xffff, because this magic value is used by the kernel....
CVE-2022-49872: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: gso: fix panic on fraglist with mixed head alloc types Since commit 3dcbdb134f32 "net: gso: Fix skbsegment splat when splitting gsosize mangled skb having linear-headed fraglist", it is allowed to change gsosize of a GRO...
CVE-2024-42281
A denial of service vulnerability was found in the Linux kernel. Downgrading gsosize may trigger a crash, resulting in a loss of system availability. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria...
CVE-2024-43817 net: missing check virtio
In the Linux kernel, the following vulnerability has been resolved: net: missing check virtio Two missing check in virtionethdrtoskb allowed syzbot to crash kernels again 1. After the skbsegment function the buffer may become non-linear nrfrags != 0, but since the SKBTXSHAREDFRAG flag is not set...
CVE-2024-42281
CVE-2024-42281 is a Linux kernel vulnerability fixed by the upstream commit: bpf: Fix a segment issue when downgrading gso_size. The fix linearizes the skb when downgrading gso_size to prevent a BUG_ON() later during skb segmentation as described in citations [1,2]. The provided documents confirm...
CVE-2024-42281 bpf: Fix a segment issue when downgrading gso_size
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a segment issue when downgrading gsosize Linearize the skb when downgrading gsosize because it may trigger a BUGON later when the skb is segmented as described in 1,2...