kernel: net: add more sanity checks to qdisc_pkt_len_init()

A flaw was found in the Linux kernel's network handling, specifically within the qdiscpktleninit function. A local user could exploit this by crafting a malicious Generic Segmentation Offload GSO packet. Insufficient sanity checks in the virtionethdrtoskb function allow for an underflow in the...

DEBIAN-CVE-2024-49948

In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to qdiscpktleninit One path takes care of SKBGSODODGY, assuming skb-len is bigger than hdrlen. virtionethdrtoskb does not fully dissect TCP headers, it only make sure it is at least 20 bytes. It is...