kernel: net: add more sanity checks to qdisc_pkt_len_init()

A flaw was found in the Linux kernel's network handling, specifically within the qdiscpktleninit function. A local user could exploit this by crafting a malicious Generic Segmentation Offload GSO packet. Insufficient sanity checks in the virtionethdrtoskb function allow for an underflow in the...

kernel: net: amd-xgbe: Fix skb data length underflow

In the Linux kernel, the following vulnerability has been resolved: net: amd-xgbe: Fix skb data length underflow There will be BUGON triggered in include/linux/skbuff.h leading to intermittent kernel panic, when the skb length underflow is detected. Fix this by dropping the packet if such length...

CVE-2022-48743: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: net: amd-xgbe: Fix skb data length underflow There will be BUGON triggered in include/linux/skbuff.h leading to intermittent kernel panic, when the skb length underflow is detected. Fix this by dropping the packet if such length...

PT-2024-11791

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a bug in the Linux kernel's amd-xgbe component, which can cause a kernel panic due to inconsistencies in hardware descriptors. When the skb length underflow is...