CVE-2025-40292 virtio-net: fix received length check in big packets

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix received length check in big packets Since commit 4959aebba8c0 "virtio-net: use mtu size as buffer length for big packets", when guest gso is off, the allocated size for big packets is not MAXSKBFRAGS PAGESIZE...

Linux Distros Unpatched Vulnerability : CVE-2023-53517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: do not update mtu if msgmax is too small in mtu negotiation When doing link mtu negotiation, a malicious peer may send Activate msg with a very small mtu,...

EUVD-2025-31881

Malicious code in bioql PyPI...

SUSE CVE-2023-53517

In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msgmax is too small in mtu negotiation When doing link mtu negotiation, a malicious peer may send Activate msg with a very small mtu, e.g. 4 in Shuang's testing, without checking for the minimum mtu,...

CVE-2023-53517

The CVE-2023-53517 vulnerability is in the Linux kernel TIPC mtu negotiation logic. When a peer sends an Activate message with a very small mtu (e.g., 4), tipc_link_proto_rcv() can set l->mtu to 4 and then n->links[bearer_id].mtu to 4294967228, causing an overflow in tipc_link_mss(). This c...

CVE-2023-53517 tipc: do not update mtu if msg_max is too small in mtu negotiation

In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msgmax is too small in mtu negotiation When doing link mtu negotiation, a malicious peer may send Activate msg with a very small mtu, e.g. 4 in Shuang's testing, without checking for the minimum mtu,...

PT-2025-40224

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0.neta Description The Linux kernel contains a flaw in the tipc Trusted Inter-Process Communication subsystem related to Maximum Transmission Unit MTU negotiation. A malicious peer could potentially send an...

kernel: Linux kernel: Denial of Service via malicious MTU negotiation in TIPC

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC protocol. A malicious peer can exploit this by sending a specially crafted Activate message with a very small Maximum Transmission Unit MTU value during link MTU negotiation. This can lead to an integer overflow,...