PT-2026-91336

In the Linux kernel, the following vulnerability has been resolved: ipv4: reject undersized MTUs in ip do fragment ip do fragment subtracts the IPv4 header length from the effective MTU and passes the resulting payload MTU to ip frag next. If the effective MTU is smaller than hlen + 8, ip frag ne...

PT-2026-85634

In the Linux kernel, the following vulnerability has been resolved: ipv4: reject undersized MTUs in ip do fragment ip do fragment subtracts the IPv4 header length from the effective MTU and passes the resulting payload MTU to ip frag next. If the effective MTU is smaller than hlen + 8, ip frag ne...

CVE-2024-26921

CVE-2024-26921 affects the Linux kernel inet_defrag path. The issue arises when ip_local_out() and similar calls pass skb->sk as an argument and the skb is a fragment undergoing reassembly; if reassembly happens before the call returns, the socket (skb->sk) must not be released. This can oc...

PT-2021-8274

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.0-rc6+ Description The vulnerability is related to a stack out-of-bounds read in the ip do fragment function when fragmenting IPv4 packets. This occurs when the ovs fragment function uses a temporary struct...

PT-2018-12635

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.19-rc1 through 4.19-rc3 Description A security flaw was found in the ip frag reasm function, which can cause a later system crash in ip do fragment. With certain non-default configuration of a victim host, an attacker c...