CVE-2025-38463

CVE-2025-38463: Linux kernel TCP skb remaining space calculation contains a signedness bug in skb->len vs size_goal, allowing sk_forward_alloc overflow in certain write-path conditions. Root cause: copy = size_goal - skb->len is computed with mismatched signed/unsigned types, producing a la...