CVE-2024-26752

In the Linux kernel, the following vulnerability has been resolved: l2tp: pass correct message length to ip6appenddata l2tpip6sendmsg needs to avoid accounting for the transport header twice when splicing more data into an already partially-occupied skbuff. To manage this, we check whether the...

CVE-2021-47162

In the Linux kernel, the following vulnerability has been resolved: tipc: skblinearize the head skb when reassembling msgs It's not a good idea to append the frag skb to a skb's fraglist if the fraglist already has skbs from elsewhere, such as this skb was created by pskbcopy where the fraglist w...

CVE-2024-26636

In the Linux kernel, the following vulnerability has been resolved: llc: make llcuisendmsg more robust against bonding changes syzbot was able to trick llcuisendmsg, allocating an skb with no headroom, but subsequently trying to push 14 bytes of Ethernet header 1 Like some others, llcuisendmsg...

CVE-2021-47099 veth: ensure skb entering GRO are not cloned.

In the Linux kernel, the following vulnerability has been resolved: veth: ensure skb entering GRO are not cloned. After commit d3256efd8e8b "veth: allow enabling NAPI even without XDP", if GRO is enabled on a veth device and TSO is disabled on the peer device, TCP skbs will go through the NAPI...

CVE-2023-52527 ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()

In the Linux kernel, the following vulnerability has been resolved: ipv4, ipv6: Fix handling of transhdrlen in ip,6appenddata Including the transhdrlen in length is a problem when the packet is partially filled e.g. something like sendMSGMORE happened previously when appending to an IPv4 or IPv6...

PT-2025-38204

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.123+ Description A flaw was discovered in the Linux kernel’s skbuff subsystem within the skb segment function. A change introduced by commit bf5c25d60861 incorrectly ordered the call to zero-copy functions,...

GSD-2023-1001575 skbuff: Account for tail adjustment during pull operations

skbuff: Account for tail adjustment during pull operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001363 skbuff: Account for tail adjustment during pull operations

skbuff: Account for tail adjustment during pull operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001040 skbuff: Account for tail adjustment during pull operations

skbuff: Account for tail adjustment during pull operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000618 skbuff: Account for tail adjustment during pull operations

skbuff: Account for tail adjustment during pull operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-33695

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue concerns the skbuff component, specifically with accounting for tail adjustments during pull operations. The actual impact and attack plausibility have not yet been proven...

PT-2023-34440

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns the skbuff component, specifically with accounting for tail adjustments during pull operations. The actual impact and attack plausibility have not yet been proven...

PT-2023-34652

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue concerns the skbuff component, specifically with tail adjustment during pull operations. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2025-38175

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to skbuff socket buffer handling during pull operations. Extending the tail of a skbuff can lead to unexpected behavior when using helpers like...

PT-2025-38425

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free vulnerability exists in the brcmfmac module within the Linux kernel, specifically within the brcmf netdev start xmit function. This issue occurs when a data structure is...

GSD-2022-1001691 skbuff: fix coalescing for page_pool fragment recycling

skbuff: fix coalescing for pagepool fragment recycling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

GSD-2022-1001363 skbuff: fix coalescing for page_pool fragment recycling

skbuff: fix coalescing for pagepool fragment recycling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

GSD-2022-1001020 skbuff: fix coalescing for page_pool fragment recycling

skbuff: fix coalescing for pagepool fragment recycling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

PT-2022-29636

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to the coalescing for page pool fragment recycling in the skbuff. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29964

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to the coalescing for page pool fragment recycling in the skbuff. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...